KLA11577 Multiple vulnerability in Microsoft Office

🗓️ 08 Oct 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 36 Views

Multiple vulnerabilities found in Microsoft Office, including XSS, privilege escalation, and remote code execution

Reporter	Title	Published	Views	Family All 92
BDU FSTEC	The vulnerability of Microsoft SharePoint Enterprise Server and Microsoft SharePoint Foundation arises from the lack of measures taken to protect the structure of web pages. This allows attackers to execute cross-site scripting attacks.	24 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Enterprise Server and Microsoft SharePoint Foundation lies in the lack of measures taken to protect the structure of web pages, allowing attackers to enhance their privileges.	24 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their lack of access control mechanisms, which allows attackers to increase their privileges.	24 Oct 201900:00	–	bdu_fstec
BDU FSTEC	Vulnerability of Microsoft Excel, Office, and Office 365 spreadsheet applications, related to object processing in memory, allows attackers to execute arbitrary code.	24 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office suite relates to the handling of objects in memory, allowing an attacker to execute arbitrary code.	24 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software lies in the lack of protection for website structures. This allows attackers to execute cross-site scripting attacks and execute arbitrary code in the context of the current user.	29 Oct 201900:00	–	bdu_fstec
CNVD	Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-35572)	10 Oct 201900:00	–	cnvd
CNVD	Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-40533)	18 Oct 201900:00	–	cnvd
Check Point Advisories	Microsoft SharePoint Server Cross Site Scripting (CVE-2019-1070)	12 Apr 202000:00	–	checkpoint_advisories
CVE	CVE-2019-1070	10 Oct 201913:28	–	cve

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1070
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1329
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1328
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1331
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1327
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1330
threats	www.threats.kaspersky.com/en/product/Microsoft-Office/
threats	www.threats.kaspersky.com/en/product/Microsoft-Excel/
support	www.support.microsoft.com/kb/4484122
support	www.support.microsoft.com/kb/4484111

22 Jan 2024 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 29.3

CVSS 3.18.8

EPSS0.17876