Exploited Vulnerabilities DailyCVE-2019-0604: Microsoft SharePoint
EPSS99.9%No. 119 of 1739 in KEV
CVE year2019~2 yrs before listing
Same vendor in KEV389
Same product10
| Field | Value |
|---|---|
| Vendor | Microsoft |
| Product | SharePoint |
| Name | Microsoft SharePoint Remote Code Execution Vulnerability |
| Added to KEV | 2021-11-03 |
| US federal due date | 2022-05-03 |
| Ransomware use | Known |
| CWE | CWE-20 |
CISA description
Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-65660 | Microsoft SharePoint | 2026-09-25 | 2.1% | Unknown |
| CVE-2026-55040 | Microsoft SharePoint | 2026-08-18 | 69.5% | Unknown |
| CVE-2026-50522 | Microsoft SharePoint | 2026-07-22 | 3.0% | Unknown |
| CVE-2026-58644 | Microsoft SharePoint | 2026-07-16 | 15.8% | Unknown |
| CVE-2026-20963 | Microsoft SharePoint | 2026-03-18 | 29.5% | Unknown |
| CVE-2025-49706 | Microsoft SharePoint | 2025-07-22 | 99.0% | Known |
| CVE-2025-49704 | Microsoft SharePoint | 2025-07-22 | 99.9% | Known |
| CVE-2025-53770 | Microsoft SharePoint | 2025-07-20 | 99.9% | Known |
| CVE-2024-38094 | Microsoft SharePoint | 2024-10-22 | 50.8% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Microsoft SharePoint vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2021-11-03.