ZeroDay Findings
Sign inSign up

Findings

CVE-2019-0604

Microsoft SharePoint Remote Code Execution Vulnerability

Published Mar 5, 2019 · updated Jun 16, 2026 · microsoft sharepoint enterprise server

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 5, 2019 · Catalog

    Detected

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

  2. Nov 3, 2021 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. May 3, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

Required action

Apply updates per vendor instructions.

CISA due date May 3, 2022

Affected

  • cpe microsoft/sharepoint enterprise server2016
  • cpe microsoft/sharepoint foundation2013
  • cpe microsoft/sharepoint server2010
  • cpe microsoft/sharepoint server2019
  • vendor Microsoft SharePointversion unspecified

Sources

  • CISA KEVCVE-2019-0604

    Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.

    cisa.gov
  • CVE.orgCVE-2019-0604

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2019-0604

    30-day exploitation probability 99.9%

    first.org
  • Exploit Database48053

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2019-0604

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

    nvd.nist.gov

References