CVE-2019-0557: XSS

Published Jan 8, 2019

Updated

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0556, CVE-2019-0558.

Affected Software

1 affected component

Microsoft SharePoint Server=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0557

Event History

Jan 8, 2019

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Data Sourced

via NVD·09:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-0557?

CVE-2019-0557 has a severity rating of High, indicating a significant security risk to affected systems.

How do I fix CVE-2019-0557?

To fix CVE-2019-0557, apply the security update provided by Microsoft for the affected version of SharePoint Server.

What does CVE-2019-0557 affect?

CVE-2019-0557 affects Microsoft SharePoint Server 2016 and may allow attackers to execute scripts in a user's browser.

Is CVE-2019-0557 a common vulnerability?

Yes, CVE-2019-0557 is a recognized cross-site scripting vulnerability that is identified by its unique CVE ID.

Can CVE-2019-0557 lead to data theft?

Yes, exploitation of CVE-2019-0557 could potentially allow attackers to steal sensitive information from users if successfully executed.