CVE-2019-1070

No fix known EPSS 2%

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.

Published 2019-10-10 · CVE record · OSV

Products: Microsoft SharePoint Foundation, Microsoft SharePoint Enterprise Server