KLA11774 Multiple vulnerabilities in Microsoft Office

🗓️ 12 May 2020 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 50 Views

Multiple vulnerabilities in Microsoft Office, including XSS, remote code execution, and information disclosure, can allow spoofing user interface, executing arbitrary code, and obtaining sensitive information

Reporter	Title	Published	Views	Family All 168
Information Security Automation	Microsoft Patch Tuesday May 2020: comments from VM vendors, promising stuff for phishing, troubles with SharePoint and lulz with Visual Studio	13 May 202000:49	–	avleonov
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server, related to deficiencies in access control, allows attackers to increase their privileges.	26 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server arises from the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	26 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in insufficient validation of input data, allowing an attacker to execute arbitrary code.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their improper handling of queries, allowing attackers to gain unauthorized access to protected information.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.	29 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel’s spreadsheet editor involves an operation where data is written beyond the buffer in memory, allowing an attacker to execute arbitrary code.	29 May 202000:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1099
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0901
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1069
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1024
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1100
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1101
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1023
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1103
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1102
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1105

22 Jan 2024 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 27.5

CVSS 3.15.4 - 9.8

EPSS0.15134

SSVC