CVE-2019-1070: XSS
Published Oct 10, 2019
·Updated
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.
Affected Software
2 affected components
Microsoft SharePoint Enterprise Server=2013-sp1
Microsoft SharePoint Enterprise Server=2016
Remediation
Event History
Oct 10, 2019
CVE Published
via MITRE·01:28 PM
Data Sourced
via MITRE·01:28 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-1070?
CVE-2019-1070 has a severity rating of important, indicating a significant impact if exploited.
2
How do I fix CVE-2019-1070?
To fix CVE-2019-1070, apply the latest security updates provided by Microsoft for SharePoint Server 2013 SP1 and 2016.
3
What type of vulnerability is CVE-2019-1070?
CVE-2019-1070 is a cross-site scripting (XSS) vulnerability that affects Microsoft SharePoint Server.
4
Which versions of SharePoint are affected by CVE-2019-1070?
CVE-2019-1070 affects Microsoft SharePoint Enterprise Server versions 2013 SP1 and 2016.
5
What happens if CVE-2019-1070 is exploited?
If exploited, CVE-2019-1070 could allow an attacker to execute scripts in the context of the user's session.