Microsoft Excel Remote Code Execution Vulnerability

The Microsoft office Product is missing security updates.

  - Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability (CVE-2020-17062)

  - Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17019,     CVE-2020-17065, CVE-2020-17066. (CVE-2020-17064)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Office Excel installation on the remote host is missing a security update. It is, therefore, affected by an unspecified remote code execution vulnerability. An attacker can exploit this vulnerability by tricking a user into opening a specially crafted Office file.

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by unspecified remote code execution vulnerabilities. An attacker can use a specially crafted Office file to exploit these vulnerabilities. (CVE-2020-17064, CVE-2020-17065)

ID	Name	Product	Family	Severity
162068	Security Updates for Microsoft Office Products C2R (November 2020)	Nessus	Windows	high
162018	Security Updates for Microsoft Excel Products C2R (November 2020)	Nessus	Windows	high
142695	Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (November 2020)	Nessus	Windows : Microsoft Bulletins	high
142689	Security Updates for Microsoft Office Products (November 2020)	Nessus	Windows : Microsoft Bulletins	high
142685	Security Updates for Microsoft Excel Products (November 2020)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2020-17064

high

Tenable Plugins

high

high

high

high

high