Description (CNA)
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers. This CVE ID is unique from CVE-2019-0556, CVE-2019-0557.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Microsoft / Microsoft SharePoint Server | affected 2019 |
| Microsoft / Microsoft SharePoint | affected Enterprise Server 2013 Service Pack 1; affected Enterprise Server 2016 |
| Microsoft / Microsoft Business Productivity Servers | affected 2010 Service Pack 2 |
CWE
No CWE identifiers supplied.
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0558
- http://www.securityfocus.com/bid/106389
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.