CVE-2018-8247

Опубликовано: 14 июн. 2018

Источник: nvd

CVSS3: 5.4

CVSS2: 5.8

EPSS Низкий

Описание

An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Microsoft Office Elevation of Privilege Vulnerability." This affects Microsoft Office, Microsoft Office Online Server. This CVE ID is unique from CVE-2018-8245.

Ссылки

http://www.securityfocus.com/bid/104319
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041104
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8247
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104319
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041104
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8247
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:office_online_server:2016:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01555

Низкий

5.4 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2018-8247

msrc

около 7 лет назад

Microsoft Office Elevation of Privilege Vulnerability

GHSA-9635-5wrr-hhvf