# CVE-2019-0604

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.

- Page: https://www.vulneraibility.com/cve/CVE-2019-0604
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2021-11-03; CISA due date 2022-05-03; known ransomware use
- EPSS: 99.91% (percentile 100.0)
- Public exploit code: 1 on Exploit-DB · 7 GitHub proofs of concept (first 2019-03-23)
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2025-02-07)
- Weakness: CWE-20
- Published: 2019-03-05

## Affected versions

- Microsoft Microsoft SharePoint Enterprise Server: affected 2016
- Microsoft Microsoft SharePoint Foundation: affected 2013 Service Pack 1
- Microsoft Microsoft SharePoint Server: affected 2010 Service Pack 2; 2019

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] http://www.securityfocus.com/bid/106914
- [other] https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0604

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.