CVE-2019-0604: Microsoft SharePoint Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.
Other sources
Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.
— CISA
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-0604?
CVE-2019-0604 is a remote code execution vulnerability in Microsoft SharePoint.
How severe is CVE-2019-0604?
CVE-2019-0604 has a severity rating of 9.8 out of 10, which is considered critical.
Which versions of Microsoft SharePoint are affected by CVE-2019-0604?
Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Foundation 2013 SP1, Microsoft SharePoint Server 2010 SP2, and Microsoft SharePoint Server 2019 are affected by CVE-2019-0604.
What is the CWE ID for CVE-2019-0604?
CVE-2019-0604 is categorized under CWE-20: Improper Input Validation.
How can I fix CVE-2019-0604?
To fix CVE-2019-0604, it is recommended to apply the latest security updates provided by Microsoft.