VDB

GCVE-VVD-NCSC-2024-284

GCVE-VVD-NCSC-2024-284
Advisory PublishedCVSS 7.2/10
Vulnetix · Advisory published July 9, 2024
Microsoft heeft kwetsbaarheden verholpen in Office, Sharepoint en Outlook.

Weaknesses (CWE)

CWE-502Deserialization of Untrusted DataCWE-918Server-Side Request Forgery (SSRF)CWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-20Improper Input Validation

Risk Scores

CVSS 3.1
7.2/10
High · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersionsPlatforms
microsoftmicrosoft_sharepoint_enterprise_server_2016
microsoftmicrosoft_sharepoint_server_2019
microsoftmicrosoft_sharepoint_server_subscription_edition
microsoftmicrosoft_office_2019
microsoftmicrosoft_365_apps_for_enterprise
microsoftmicrosoft_office_ltsc_2021
microsoftmicrosoft_office_2016
microsoftmicrosoft_outlook_2016

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›