Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-06-09	CVE-2020-1323	Open Redirect vulnerability in Microsoft Sharepoint Enterprise Server and Sharepoint Server An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, aka 'SharePoint Open Redirect Vulnerability'. network low complexity microsoft CWE-601	6.1
2020-06-09	CVE-2020-1322	Use of Uninitialized Resource vulnerability in Microsoft 365 Apps, Office and Project An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'. network low complexity microsoft CWE-908	6.5
2020-06-09	CVE-2020-1320	Cross-site Scripting vulnerability in Microsoft products A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. network low complexity microsoft CWE-79	5.4
2020-06-09	CVE-2020-1318	Cross-site Scripting vulnerability in Microsoft products A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. network low complexity microsoft CWE-79	5.4
2020-06-09	CVE-2020-1315	Unspecified vulnerability in Microsoft Internet Explorer 11/9 An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer Information Disclosure Vulnerability'. network high complexity microsoft	5.3
2020-06-09	CVE-2020-1310	Unspecified vulnerability in Microsoft products An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. local low complexity microsoft	6.7
2020-06-09	CVE-2020-1298	Cross-site Scripting vulnerability in Microsoft products A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. network low complexity microsoft CWE-79	5.4
2020-06-09	CVE-2020-1297	Cross-site Scripting vulnerability in Microsoft products A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. network low complexity microsoft CWE-79	5.4
2020-06-09	CVE-2020-1296	Unspecified vulnerability in Microsoft products A vulnerability exists in the way the Windows Diagnostics & feedback settings app handles objects in memory, aka 'Windows Diagnostics & feedback Information Disclosure Vulnerability'. local low complexity microsoft	5.5
2020-06-09	CVE-2020-1290	Unspecified vulnerability in Microsoft products An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. local low complexity microsoft	5.5