CVE-2019-1032

CVE-2019-1032 is a medium-severity cross-site scripting (XSS) vulnerability affecting Microsoft SharePoint Server and SharePoint Enterprise Server. An authenticated attacker could exploit this by sending a specially crafted web request, allowing them to execute scripts in the current user's security context. This could lead to unauthorized content reading, actions on behalf of the user (like changing permissions or deleting content), and malicious content injection. The vulnerability has a CVSS score of 5.4, indicating a network-based attack with low complexity requiring user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it received limited community discussion and media coverage.