KLA11663 Multiple vulnerabilities in Microsoft Office

🗓️ 11 Feb 2020 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 57 Views

Multiple vulnerabilities in Microsoft Office, including remote code execution in Excel, cross-site scripting in SharePoint and spoofing in Outlook and Office Online Server

Reporter	Title	Published	Views	Family All 97
BDU FSTEC	The vulnerability of Microsoft Excel editors, as well as Microsoft Office products and Office 365, allows a perpetrator to execute arbitrary code.	10 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Office Online Server web server, related to insufficient validation of input data, allows attackers to carry out spoofing attacks.	10 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the OLicenseHeartbeat task in the Microsoft Office software package allows a hacker to increase their privileges.	10 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.	10 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server stems from the lack of protective measures for website structures. This allows attackers to execute cross-site scripting attacks and execute arbitrary code in the context of the current user.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook client and the Microsoft Office and Office 365 ProPlus software packages relates to a security feature that allows an attacker to bypass existing security restrictions. This feature enables the attacker to redirect users to malicious URIs and execute malicious code in conjunction with other vulnerabilities.	12 Mar 202000:00	–	bdu_fstec
Circl	CVE-2020-0693	28 Feb 202520:27	–	circl
Circl	CVE-2020-0694	28 Feb 202520:27	–	circl
CNVD	Microsoft Excel Remote Code Execution Vulnerability	12 Feb 202000:00	–	cnvd
CNVD	Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-10479)	17 Feb 202000:00	–	cnvd

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0759
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0693
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0696
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0697
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0694
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0695
threats	www.threats.kaspersky.com/en/product/Microsoft-Office/
threats	www.threats.kaspersky.com/en/product/Microsoft-Outlook/
threats	www.threats.kaspersky.com/en/product/Microsoft-Excel/
support	www.support.microsoft.com/kb/4484265

22 Jan 2024 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 29.3

CVSS 3.15.4 - 8.8

EPSS0.14812

SSVC