CVE-2019-0594: Input Validation
Published Mar 5, 2019
·Updated
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0604.
Affected Software
4 affected components
Microsoft SharePoint Enterprise Server=2016
Microsoft SharePoint Foundation=2013-sp1
Microsoft SharePoint Server=2010-sp2
Microsoft SharePoint Server=2019
Remediation
Event History
Mar 5, 2019
CVE Published
11:29 PM
Mar 6, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-0594?
CVE-2019-0594 is rated as important, indicating a significant risk of remote code execution.
2
What versions of SharePoint are affected by CVE-2019-0594?
CVE-2019-0594 affects Microsoft SharePoint Server 2010 SP2, 2013 SP1, 2016, and 2019.
3
How do I fix CVE-2019-0594?
To mitigate CVE-2019-0594, users should apply the latest security updates provided by Microsoft.
4
Can CVE-2019-0594 allow attackers to execute arbitrary code?
Yes, CVE-2019-0594 allows an attacker to execute arbitrary code on the affected SharePoint servers.
5
Is there a workaround for CVE-2019-0594 until I can apply a fix?
There are no known effective workarounds for CVE-2019-0594, so it is recommended to apply updates as soon as possible.