Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-0670

22
FAUCET Score

CVE-2019-0670 is a medium-severity spoofing vulnerability in Microsoft SharePoint Enterprise Server and SharePoint Foundation, stemming from improper parsing of HTTP content. An attacker could exploit this remotely with low complexity, requiring user interaction, to achieve partial confidentiality and integrity compromise. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has received some community discussion and media coverage, indicating awareness.

Impacted Technologies

VendorProductVersion(s)CPE
2013CPE matchmatch criteria
cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*
2013CPE matchmatch criteria
cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

6.1MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
2.8
Impact Score
2.7
CvssVersion
3.0

Exploit Intelligence

EPSS Score
2.46%
Probability of exploitation in next 30 days
EPSS Percentile
82.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0246 is in the 92nd percentile among its peer group of 26,236 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

microsoftpatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: Microsoft SharePoint Enterprise Server 2013 Service Pack 1
View patch
microsoftpatch availablevia msrc
Product: Microsoft SharePoint Foundation 2013 Service Pack 1
View patch

Vendor Advisories (1)

microsoft2019-Feb/CVE-2019-0670Moderate

Microsoft SharePoint Spoofing Vulnerability

Feb 12, 2019

References

portal.msrc.microsoft.com / en-US/security-guidance/advisory/CVE-2019-0670
PatchVendor Advisory
securityfocus.com / bid/106900
Third Party AdvisoryVDB Entry