CVE-2019-0558 - A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers

Back Back to CVE browser

MEDIUM

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers

Published Jan 8, 2019

5.4

MEDIUM

CVSS 3.1

EPSS 2.00%

Description

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers. This CVE ID is unique from CVE-2019-0556, CVE-2019-0557.

Affected products

Vendor Microsoft Product Microsoft Business Productivity Servers Default
n/a
- Version
  2010 Service Pack 2
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Microsoft SharePoint Default
n/a
- Version
  Enterprise Server 2013 Service Pack 1
  Status
  affected
  Constraints
  -
- Version
  Enterprise Server 2016
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Microsoft SharePoint Server Default
n/a
- Version
  2019
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Microsoft Business Productivity Servers

n/a

Version	Status	Constraints
2010 Service Pack 2	affected	-

Microsoft

Microsoft SharePoint

n/a

Version	Status	Constraints
Enterprise Server 2013 Service Pack 1	affected	-
Enterprise Server 2016	affected	-

Microsoft

Microsoft SharePoint Server

n/a

Version	Status	Constraints
2019	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

http://www.securityfocus.com/bid/106389
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0558
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/106389		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0558		x_refsource_CONFIRMPatchVendor Advisory