VULNERABILITY INTELLIGENCE
CVE-2019-0952
CVSS score8.8 HIGH
EPSS probability9.55%
CISA KEVNot currently listed
Published2019-05-16
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- secure@microsoft.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory