CVE-2019-1257

high · 8.8

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1295, CVE-2019-1296.

8.8

CVSS

11.7%

EPSS (exploit prob.)

96th

EPSS percentile

2019-09-11

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-20

Affected products

Vendor	Product	Affected versions
microsoft	sharepoint_enterprise_server	2016
microsoft	sharepoint_foundation	2010
microsoft	sharepoint_foundation	2013
microsoft	sharepoint_server	2019

Check a specific version with /api/v1/cve/match.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1257
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1257

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-1257