Vulnerability Details CVE-2013-5054
Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.114
EPSS Ranking 93.2%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2013-5054
-
cpe:2.3:a:microsoft:office:2013
-
cpe:2.3:a:microsoft:office_2013_rt:-