CVE-2019-0952: High severity microsoft sharepoint enterprise server 2016 vulnerability
Published May 16, 2019
·Updated
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
Affected Software
2 affected components
Microsoft SharePoint Enterprise Server=2016
Microsoft SharePoint Foundation=2013-sp1
Remediation
Event History
May 16, 2019
CVE Published
via MITRE·06:17 PM
Data Sourced
via MITRE·06:17 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-0952?
CVE-2019-0952 has a critical severity rating due to its potential for remote code execution.
2
How do I fix CVE-2019-0952?
To mitigate CVE-2019-0952, it is recommended to apply the security updates provided by Microsoft for affected SharePoint versions.
3
Which versions of SharePoint are affected by CVE-2019-0952?
CVE-2019-0952 affects Microsoft SharePoint Enterprise Server 2016 and Microsoft SharePoint Foundation 2013 SP1.
4
What type of vulnerability is CVE-2019-0952?
CVE-2019-0952 is classified as a remote code execution vulnerability.
5
Can CVE-2019-0952 be exploited remotely?
Yes, CVE-2019-0952 can be exploited remotely, allowing an attacker to execute arbitrary code on the server.