Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-42295
HistoryDec 15, 2021 - 3:15 p.m.

CVE-2021-42295

2021-12-1515:15:08
[email protected]
web.nvd.nist.gov
1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

46.3%

JSON

Visual Basic for Applications Information Disclosure Vulnerability

Affected configurations

NVD
Node
microsoft365_appsMatch-enterprisex64
OR
microsoft365_appsMatch-enterprisex86
OR
microsoftofficeMatch2013sp1x64
OR
microsoftofficeMatch2013sp1x86
OR
microsoftofficeMatch2013sp1rt
OR
microsoftofficeMatch2016x64
OR
microsoftofficeMatch2016x86
OR
microsoftofficeMatch2019x64
OR
microsoftofficeMatch2019x86
OR
microsoftofficeMatch2021ltscx64
OR
microsoftofficeMatch2021ltscx86

Related

openvas 3
mscve 1
cve 1
mskb 2
cvelist 1
prion 1
vulnrichment 1
nessus 2
kaspersky 1
rapid7blog 1
openvas
openvas
Microsoft Office 2013 Information Disclosure Vulnerability (KB4486726)
2021-12-15 00:00:00
Microsoft Office 2016 Information Disclosure Vulnerability (KB4504710)
2021-12-15 00:00:00
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Dec 2021)
2021-12-15 00:00:00
mscve
mscve
Visual Basic for Applications Information Disclosure Vulnerability
2021-12-14 08:00:00
cve
cve
CVE-2021-42295
2021-12-15 15:15:08
mskb
mskb
Description of the security update for Office 2016: December 14, 2021 (KB4504710)
2021-12-14 08:00:00
Description of the security update for Office 2013: December 14, 2021 (KB4486726)
2021-12-14 08:00:00
cvelist
cvelist
CVE-2021-42295 Visual Basic for Applications Information Disclosure Vulnerability
2021-12-15 14:14:55
prion
prion
Information disclosure
2021-12-15 15:15:00
vulnrichment
vulnrichment
CVE-2021-42295 Visual Basic for Applications Information Disclosure Vulnerability
2021-12-15 14:14:55
nessus
nessus
Security Updates for Microsoft Office Products C2R (December 2021)
2022-06-10 00:00:00
Security Updates for Microsoft Office Products (December 2021)
2021-12-14 00:00:00
kaspersky
kaspersky
KLA12389 Multiple vulnerabilities in Microsoft Office
2021-12-14 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - December 2021
2021-12-14 22:12:53

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

46.3%

JSON
Related for NVD:CVE-2021-42295
openvas3mscve1cve1mskb2cvelist1prion1vulnrichment1nessus2kaspersky1rapid7blog1