CVE-2019-0594: Input Validation
First published: Tue Mar 05 2019(Updated: )
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0604.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft SharePoint Enterprise Server | =2016 | |
| Microsoft SharePoint Foundation | =2013-sp1 | |
| Microsoft SharePoint Server | =2010-sp2 | |
| Microsoft SharePoint Server | =2019 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-0594?
CVE-2019-0594 is rated as important, indicating a significant risk of remote code execution.
What versions of SharePoint are affected by CVE-2019-0594?
CVE-2019-0594 affects Microsoft SharePoint Server 2010 SP2, 2013 SP1, 2016, and 2019.
How do I fix CVE-2019-0594?
To mitigate CVE-2019-0594, users should apply the latest security updates provided by Microsoft.
Can CVE-2019-0594 allow attackers to execute arbitrary code?
Yes, CVE-2019-0594 allows an attacker to execute arbitrary code on the affected SharePoint servers.
Is there a workaround for CVE-2019-0594 until I can apply a fix?
There are no known effective workarounds for CVE-2019-0594, so it is recommended to apply updates as soon as possible.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/remedy
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/tags
- agent/event
- agent/description
- agent/source
- vendor/microsoft
- canonical/microsoft sharepoint enterprise server
- version/microsoft sharepoint enterprise server/2016
- canonical/microsoft sharepoint foundation
- version/microsoft sharepoint foundation/2013-sp1
- canonical/microsoft sharepoint server
- version/microsoft sharepoint server/2010-sp2
- version/microsoft sharepoint server/2019