Home

CVE-2020-17125

Description

Microsoft Excel Remote Code Execution Vulnerability

Risk Information

Base Score
7.7
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS Score
Exploitation Probability
12.927

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2016 (KB4486754) 32-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2016 (KB4486754) 64-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2013 (KB4493139) 32-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2013 (KB4493139) 64-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Office Web Apps Server 2013 (KB4486760)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2010 (KB4493148) 32-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2010 (KB4493148) 64-Bit EditionWindows
Microsoft Outlook Information Disclosure Vulnerability for Office 2019 for x86 1808 of version(10369.20032)Windows
Microsoft Outlook Information Disclosure Vulnerability for Office 2019 x64 1808 (Build:10369.20032)Windows
Microsoft Outlook Information Disclosure Vulnerability for Office 2019 for x64 1808 of version(10369.20032)Windows
Microsoft Outlook Information Disclosure Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Channel for x64 2002 of version(12527.21416)Windows
Microsoft Outlook Information Disclosure Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Channel for x86 2002 of version(12527.21416)Windows
Microsoft Outlook Information Disclosure Vulnerability for Microsoft 365 Apps for Business Semi Annual Channel for x64 2002 of version(12527.21416)Windows
Microsoft Outlook Information Disclosure Vulnerability for Microsoft 365 Apps for Business Semi Annual Channel for x86 2002 of version(12527.21416)Windows
Microsoft Outlook Information Disclosure Vulnerability for Microsoft 365 Apps for Enterprise Semi-Annual Channel Version 2002 (Build 12527.21416)Windows
Microsoft Outlook Information Disclosure Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x64 2008 of version(13127.20910)Windows
Microsoft Outlook Information Disclosure Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x86 2008 of version(13127.20910)Windows
Microsoft Outlook Information Disclosure Vulnerability for Microsoft 365 Apps for Enterprise Targeted Channel Version 2008 (Build 13127.20910)Windows
Microsoft Outlook Information Disclosure Vulnerability for Microsoft 365 Apps for Enterprise Current Channel for x64 2011 of version(13426.20332)Windows
Microsoft Outlook Information Disclosure Vulnerability for Microsoft 365 Apps for Enterprise Current Channel for x86 2011 of version(13426.20332)Windows
Microsoft Outlook Information Disclosure Vulnerability for Microsoft 365 Apps for Business Current Channel for x64 2011 of version(13426.20332)Windows
Microsoft Outlook Information Disclosure Vulnerability for Microsoft 365 Apps for Business Current Channel for x86 2011 of version(13426.20332)Windows
Microsoft Outlook Information Disclosure Vulnerability for Microsoft 365 Apps for Enterprise Current Channel Version 2011 (Build 13426.20332)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-30503Security Update for Microsoft Excel 2016 (KB4486754) 32-Bit Edition
PATCH-30504Security Update for Microsoft Excel 2016 (KB4486754) 64-Bit Edition
PATCH-30495Security Update for Microsoft Excel 2013 (KB4493139) 32-Bit Edition
PATCH-30496Security Update for Microsoft Excel 2013 (KB4493139) 64-Bit Edition
PATCH-30498Security Update for Microsoft Office Web Apps Server 2013 (KB4486760)
PATCH-30487Security Update for Microsoft Excel 2010 (KB4493148) 32-Bit Edition
PATCH-30488Security Update for Microsoft Excel 2010 (KB4493148) 64-Bit Edition
PATCH-30527Update for Office 2019 for x86 1808 of version(10369.20032)
PATCH-30528Office 2016 Deployment Tool for Office 2019 x64 1808 (Build:10369.20032)
PATCH-30529Update for Office 2019 for x64 1808 of version(10369.20032)
PATCH-30531Update for Microsoft 365 Apps for Enterprise Semi Annual Channel for x64 2002 of version(12527.21416)
PATCH-30533Update for Microsoft 365 Apps for Enterprise Semi Annual Channel for x86 2002 of version(12527.21416)
PATCH-30535Update for Microsoft 365 Apps for Business Semi Annual Channel for x64 2002 of version(12527.21416)
PATCH-30537Update for Microsoft 365 Apps for Business Semi Annual Channel for x86 2002 of version(12527.21416)
PATCH-30544Update for Microsoft 365 Apps for Enterprise Semi-Annual Channel Version 2002 (Build 12527.21416)
PATCH-30539Update for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x64 2008 of version(13127.20910)
PATCH-30541Update for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x86 2008 of version(13127.20910)
PATCH-30543Update for Microsoft 365 Apps for Enterprise Targeted Channel Version 2008 (Build 13127.20910)
PATCH-30519Update for Microsoft 365 Apps for Enterprise Current Channel for x64 2011 of version(13426.20332)
PATCH-30521Update for Microsoft 365 Apps for Enterprise Current Channel for x86 2011 of version(13426.20332)
PATCH-30523Update for Microsoft 365 Apps for Business Current Channel for x64 2011 of version(13426.20332)
PATCH-30525Update for Microsoft 365 Apps for Business Current Channel for x86 2011 of version(13426.20332)
PATCH-30545Update for Microsoft 365 Apps for Enterprise Current Channel Version 2011 (Build 13426.20332)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234