CVE-2019-0558

MEDIUM

Microsoft SharePoint Server - Cross-Site Scripting via Web Request

Title source: llm

Description

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers. This CVE ID is unique from CVE-2019-0556, CVE-2019-0557.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0558

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/106389

Scores

CVSS v3 5.4

EPSS 0.0187

EPSS Percentile 77.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-79

Status published

Products (4)

microsoft/business_productivity_servers 2010 sp2

microsoft/sharepoint_server 2013 sp1

microsoft/sharepoint_server 2016

microsoft/sharepoint_server 2019

Published Jan 08, 2019

Tracked Since Feb 18, 2026