CVE-2019-0951: XSS
Published May 16, 2019
·Updated
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0950.
Affected Software
2 affected components
Microsoft SharePoint Foundation=2010-sp2
Microsoft SharePoint Foundation=2013-sp1
Remediation
Event History
May 16, 2019
CVE Published
via MITRE·06:17 PM
Data Sourced
via MITRE·06:17 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-0951?
CVE-2019-0951 is classified as a medium severity vulnerability.
2
How do I fix CVE-2019-0951?
To fix CVE-2019-0951, apply the security updates provided by Microsoft for the affected SharePoint versions.
3
Which versions of SharePoint are affected by CVE-2019-0951?
CVE-2019-0951 affects Microsoft SharePoint Foundation 2010 SP2 and 2013 SP1.
4
What type of vulnerability is CVE-2019-0951?
CVE-2019-0951 is a spoofing vulnerability that allows attackers to exploit improperly sanitized web requests.
5
Can CVE-2019-0951 be exploited remotely?
Yes, CVE-2019-0951 can be exploited remotely by sending specially crafted web requests to the affected SharePoint servers.