CVE-2020-1322

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125 CWE-908

Affected software

No affected versions have been published.

Timeline

Published: Jun 9, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-132237.5HashiCorp Vault and Vault Enterprise logged proxy environment variables that potentially included sensitive credentials. Fixed in 1.3.6 and CVE-2020-132248.8TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC23 CVE-2020-132254.8phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widg CVE-2020-132269.8WSO2 API Manager 3.0.0 does not properly restrict outbound network access from a Publisher node, opening up the possibility of SSRF to this CVE-2020-132275.3An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username (under which the web server is running) by trigge CVE-2020-132286.1An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter.CVE-2020-132298.8An issue was discovered in Sysax Multi Server 6.90. A session can be hijacked if one observes the sid value in any /scgi URI, because it is CVE-2020-13236.1An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could se CVE-2020-132304.3In Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions granted to that account (e.g., permission t CVE-2020-132316.5In Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for an admin email change.CVE-2020-132387.5Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted pac CVE-2020-132395.4The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the dir