KLA11551 Multiple vulnerabilities in Microsoft Office

🗓️ 10 Sep 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 94 Views

Multiple vulnerabilities found in Microsoft Office allowing for spoofing user interface, privilege escalation, arbitrary code execution, security restrictions bypass, and sensitive information disclosur

Reporter	Title	Published	Views	Family All 243
0day.today	Microsoft SharePoint 2013 SP1 - (DestinationFolder) Persistant Cross-Site Scripting Vulnerability	25 Sep 201900:00	–	zdt
ATTACKERKB	CVE-2019-1297	11 Sep 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.	13 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability in Microsoft SharePoint Foundation software, related to errors in processing authentication requests for applications, allows a hacker to perform cross-site forgery of these requests.	13 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management relates to session management errors, allowing an attacker to escalate their privileges.	13 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management lies in errors during the processing of authentication requests for applications. This allows a hacker to perform cross-site forgery of these requests.	13 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Foundation software, related to the lack of measures for cleaning input data, allows a perpetrator to carry out cross-site scripting attacks.	13 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, relates to errors in memory object handling, which allow attackers to disclose sensitive information.	17 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Microsoft Office packages, Office 365, and the Microsoft Project project management software are due to insufficient validation of input data, allowing attackers to execute arbitrary commands.	17 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Lync Server’s messaging server, related to the lack of protection for service data, allows attackers to disclose protected information.	17 Sep 201900:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1261
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1260
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1257
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1262
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1295
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1264
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1296
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1209
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1263
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1259

03 Apr 2025 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 29.3

CVSS 3.18.8

EPSS0.20455