| Vuln ID | Severity | Asset | STIG | Title | Status | Doc Status | Assigned To | Actions |
|---|---|---|---|---|---|---|---|---|
| V-223338 | CAT II | MONT-WS-92040 | Microsoft Office 365 ProPlus Security Te... | Untrusted Microsoft Query files must be blocked fr... | Documented Pending Review | |||
Check TextVerify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Always prevent untrusted Microsoft Query files from opening is set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\external content. Value for enableblockunsecurequeryfiles should be REG_DWORD = 1 If the value for enableblockunsecurequeryfiles is Reg_DWORD = 1, this is not a finding. Fix TextSet policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Always prevent untrusted Microsoft Query files from opening to "Enabled". Finding DetailsEvaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025 Username: MONTFORD-POINT\W.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106 ResultHash: 82D7D3AF6527645A597B5902655CF02075B86448 ~~~~~ 'Always prevent untrusted Microsoft Query files from opening' is NOT Enabled Registry Path: HKCU:\Software\Policies\Microsoft\office\16.0\excel\security\external content Value Name: enableblockunsecurequeryfiles (Not found)
Source: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_MSOffice365_V3R3_20251023-142330.ckl
Scan Date: 2026-01-14T12:57:25.987513
Technology Area: Windows Operating System
|
||||||||
| V-223338 | CAT II | MONT-WS-92010 | Microsoft Office 365 ProPlus Security Te... | Untrusted Microsoft Query files must be blocked fr... | Documented Pending Review | |||
Check TextVerify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Always prevent untrusted Microsoft Query files from opening is set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\external content. Value for enableblockunsecurequeryfiles should be REG_DWORD = 1 If the value for enableblockunsecurequeryfiles is Reg_DWORD = 1, this is not a finding. Fix TextSet policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Always prevent untrusted Microsoft Query files from opening to "Enabled". Finding DetailsEvaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 82D7D3AF6527645A597B5902655CF02075B86448 ~~~~~ 'Always prevent untrusted Microsoft Query files from opening' is NOT Enabled Registry Path: HKCU:\Software\Policies\Microsoft\office\16.0\excel\security\external content Value Name: enableblockunsecurequeryfiles (Not found)
Source: _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_MSOffice365_V3R3_20251023-141031.ckl
Scan Date: 2026-01-14T12:57:28.231385
Technology Area: Windows Operating System
|
||||||||
| V-223338 | CAT II | MONT-SW-89108 | Microsoft Office 365 ProPlus Security Te... | Untrusted Microsoft Query files must be blocked fr... | Documented Pending Review | |||
Check TextVerify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Always prevent untrusted Microsoft Query files from opening is set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\external content. Value for enableblockunsecurequeryfiles should be REG_DWORD = 1 If the value for enableblockunsecurequeryfiles is Reg_DWORD = 1, this is not a finding. Fix TextSet policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Always prevent untrusted Microsoft Query files from opening to "Enabled". Finding DetailsEvaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 465D4554F71A21FF379FD446BE2CE014BBF89B24 ~~~~~ 'Always prevent untrusted Microsoft Query files from opening' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\office\16.0\excel\security\external content Value Name: enableblockunsecurequeryfiles Value: 0x00000001 (1) Type: REG_DWORD
Source: MONT-SW-89108_MSOffice365_V3R4_20251217-202911.ckl
Scan Date: 2026-03-04T15:25:16.145630
Technology Area: Windows Operating System
|
||||||||
| V-223338 | CAT II | MONT-SW-89134 | Microsoft Office 365 ProPlus Security Te... | Untrusted Microsoft Query files must be blocked fr... | Documented Pending Review | |||
Check TextVerify the policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Always prevent untrusted Microsoft Query files from opening is set to "Enabled". Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Office\16.0\excel\security\external content. Value for enableblockunsecurequeryfiles should be REG_DWORD = 1 If the value for enableblockunsecurequeryfiles is Reg_DWORD = 1, this is not a finding. Fix TextSet policy value for User Configuration >> Administrative Templates >> Microsoft Excel 2016 >> Excel Options >> Security >> Trust Center >> External Content >> Always prevent untrusted Microsoft Query files from opening to "Enabled". Finding DetailsEvaluate-STIG 1.2510.0 (Scan-Office365_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 465D4554F71A21FF379FD446BE2CE014BBF89B24 ~~~~~ 'Always prevent untrusted Microsoft Query files from opening' is Enabled Registry Path: HKCU:\Software\Policies\Microsoft\office\16.0\excel\security\external content Value Name: enableblockunsecurequeryfiles Value: 0x00000001 (1) Type: REG_DWORD
Source: MONT-SW-89134_MSOffice365_V3R4_20251217-201101.ckl
Scan Date: 2026-03-04T15:25:42.171357
Technology Area: Windows Operating System
|
||||||||