Microsoft Yammer vulnerabilities

2 CVEs affecting Microsoft Yammer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-1265, published 2019-09-11.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-8569, published 2018-10-23. High severity, CVSS 7.8. EPSS: 13.3% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in the Yammer desktop application due to the loading of arbitrary content, aka "Yammer Desktop Application Remote Code Execution Vulnerability." This…
• CVE-2019-1265, published 2019-09-11. High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days. A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune MAM Policy.This could allow an attacker to perform functions that are restricted…