Skip to content
OpenAdvisories
Medium · 5.4 CVE-2019-1134 EUVD-2019-9710GHSA-h98h-cmxj-5mw6

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reque…

Published Jul 29, 2019 · Updated Feb 28, 2025 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft SharePoint Enterprise Server Product: Microsoft SharePoint Server

Description

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.

Affected products

VendorProductAffectedFixed
Microsoft Microsoft SharePoint Enterprise Server 2016, 2013 Service Pack 1 —
Microsoft Microsoft SharePoint Server 2019 —

References