https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1449

The Microsoft Project installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability :

  - A remote code execution vulnerability exists in     Microsoft Project software when the software fails to     check the source markup of a file. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights.  (CVE-2020-1449)

CVE-2020-1449

high

Tenable Plugins

high