CVE-2019-0558mediumCWE-79

CVE-2019-0558: medium-severity vulnerability in Microsoft SharePoint

Published · Updated

Follow this CVE+ Monitor Microsoft SharePoint Server+ Monitor Microsoft SharePoint

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 2.0%
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers. This CVE ID is unique from CVE-2019-0556, CVE-2019-0557.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected products
Microsoft · Microsoft Business Productivity ServersMicrosoft · Microsoft SharePointMicrosoft · Microsoft SharePoint Server
Related CVEs — Microsoft SharePoint

In the same product, most dangerous first.

CVE-2019-0604CRITICALCVE-2019-0604EPSS 99.9%KEVCVE-2020-1147HIGHCVE-2020-1147EPSS 95.8%KEVCVE-2020-1181—CVE-2020-1181EPSS 69.3%CVE-2020-0932—CVE-2020-0932EPSS 35.5%CVE-2019-0585—CVE-2019-0585EPSS 22.0%CVE-2018-8161—CVE-2018-8161EPSS 21.3%