Description

A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1257, CVE-2019-1295.

Remediation

References

CVE-2019-1296

Related Vulnerabilities

WordPress 2.8 Multiple Existing/Non-Existing Username Enumeration Weaknesses (0.6.2 - 2.8)

ownCloud Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-1893)

Internet Information Services Other Vulnerability (CVE-2000-0304)

WordPress Incorrect Default Permissions Vulnerability (CVE-2011-1762)

PHP Other Vulnerability (CVE-2016-4343)

Severity

High

Classification

CVE-2019-1296 CWE-20 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities