cvelist/2019/1xxx/CVE-2019-1295.json

{
    "data_type": "CVE",
    "data_format": "MITRE",
    "data_version": "4.0",
    "CVE_data_meta": {
        "ASSIGNER": "secure@microsoft.com",
        "ID": "CVE-2019-1295",
        "STATE": "PUBLIC"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "product": {
                        "product_data": [
                            {
                                "product_name": "Microsoft SharePoint Foundation",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "2010 Service Pack 2"
                                        },
                                        {
                                            "version_value": "2013 Service Pack 1"
                                        }
                                    ]
                                }
                            },
                            {
                                "product_name": "Microsoft SharePoint Enterprise Server",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "2016"
                                        }
                                    ]
                                }
                            },
                            {
                                "product_name": "Microsoft SharePoint Server",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "2019"
                                        }
                                    ]
                                }
                            }
                        ]
                    },
                    "vendor_name": "Microsoft"
                }
            ]
        }
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1257, CVE-2019-1296."
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "Remote Code Execution"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1295",
                "refsource": "MISC",
                "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1295"
            }
        ]
    }
}