2 lines
3.8 KiB
JSON
2 lines
3.8 KiB
JSON
{"affected":[{"affectedData":[{"product":"Microsoft Office","vendor":"Microsoft","versions":[{"status":"affected","version":"2019 for 32-bit editions"},{"status":"affected","version":"2019 for 64-bit editions"}]},{"product":"Office 365 ProPlus","vendor":"Microsoft","versions":[{"status":"affected","version":"32-bit Systems"},{"status":"affected","version":"64-bit Systems"}]},{"product":"Microsoft Outlook","vendor":"Microsoft","versions":[{"status":"affected","version":"2016 (32-bit edition)"},{"status":"affected","version":"2016 (64-bit edition)"},{"status":"affected","version":"2013 Service Pack 1 (32-bit editions)"},{"status":"affected","version":"2013 Service Pack 1 (64-bit editions)"},{"status":"affected","version":"2010 Service Pack 2 (32-bit editions)"},{"status":"affected","version":"2010 Service Pack 2 (64-bit editions)"},{"status":"affected","version":"2013 RT Service Pack 1"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*","matchCriteriaId":"C5282C83-86B8-442D-851D-B54E88E8B1F1","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*","matchCriteriaId":"CA035812-F35A-43F1-9A8D-EE02201AA10A","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"F9A115C1-45EB-4688-AD7C-C1854850EE9B","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"D7B6DF1E-0DDA-4809-B216-7CEFE0A53E2B","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*","matchCriteriaId":"E2B1657C-0FF4-461A-BE2A-641275C4B0A0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'."},{"lang":"es","value":"Se presenta una vulnerabilidad de omisión de la característica de seguridad en el software Microsoft Outlook cuando maneja inapropiadamente el análisis de formatos URI, también se conoce como \"Microsoft Outlook Security Feature Bypass Vulnerability\"."}],"id":"CVE-2020-0696","lastModified":"2026-06-17T02:46:23.663","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":4.3,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-02-11T22:15:16.477","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0696"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0696"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-Other"}],"source":"nvd@nist.gov","type":"Primary"}]}
|