CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-03-05
Microsoft SharePoint Remote Code Execution (RCE) Vulnerability (CVE-2019-0604) Technical Advisory
[Affected Scope] Microsoft SharePoint Server 2010, 2013, 2016, 2019, and SharePoint Foundation 2013
[Impact] Unauthenticated remote attackers can execute arbitrary code with the privileges of the SharePoint IIS application pool (w3wp.exe) by sending a specially crafted application package, leading to complete system compromise
[Mitigation] Immediately apply the official Microsoft security updates and perform compromise assessments on internet-facing SharePoint servers