CVE-2019-0958 - An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'

Back Back to CVE browser

HIGH

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'

Published May 16, 2019

8.8

HIGH

CVSS 3.0

EPSS 3.32%

Description

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0957.

Affected products

Vendor Microsoft Product Microsoft SharePoint Foundation Default
unknown
Affected
- 2013 Service Pack 1
Vendor Microsoft Product Microsoft SharePoint Server Default
unknown
Affected
- 2019

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Microsoft SharePoint Foundation	unknown	Affected 2013 Service Pack 1
Microsoft	Microsoft SharePoint Server	unknown	Affected 2019

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1693
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0958
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1693		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0958		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published May 16, 2019

Updated Aug 4, 2024

Reserved Nov 26, 2018

Link CVE-2019-0958

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-0958

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published May 16, 2019

Updated Aug 4, 2024

Link EUVD-2019-1693

GitHub

No data