Microsoft Office Web Apps Multiple Remote Code Execution Vulnerabilities (KB3191904)

This host is missing an important security update for Microsoft Office Web Apps according to Microsoft KB3191904 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Security Update for Microsoft Office Web Apps Server 2013 (KB3191888)

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Web Apps Server 2013 (KB3191888) farm-deployment

A security vulnerability exists in Microsoft Office Web Apps Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for SharePoint Server 2010 Office Web Apps: May 9, 2017

Description of the security update for SharePoint Server 2010 Office Web Apps: May 9, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, s...

Microsoft Office CVE-2017-0281 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

PT-2017-2150

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft Word affected versions not specified Word Viewer affected versions not specified Microsoft SharePoint Server affected versions...

PT-2017-2157 · Microsoft · Sharepoint Server +6

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft Word affected versions not specified Microsoft Skype for Business affected versions not specified Microsoft SharePoint Server affected versions not specified Microsoft SharePoint...

Microsoft Office XSS Elevation of Privilege Vulnerability

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. An elevation of privilege vulnerability exists in a constructed request that is not properly filtered by the Office Web Apps server, which could allow an attacker to perform a cross-site...

Microsoft Office Web Apps XSS Elevation of Privileges Vulnerability (KB3178725)

This host is missing an important security update for Microsoft Office Web Apps according to Microsoft security update KB3178725 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Office Web Apps Elevation of Privilege Vulnerability (KB3191845)

This host is missing an important security update according to Microsoft security update KB3191845 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2017-0195

Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps Server 2013 SP1 and Office Online Server allows remote attackers to perform cross-site scripting and run script with local use...

Cross site scripting

Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps Server 2013 SP1 and Office Online Server allows remote attackers to perform cross-site scripting and run script with local use...

CVE-2017-0195

Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps Server 2013 SP1 and Office Online Server allows remote attackers to perform cross-site scripting and run script with local use...

CVE-2017-0195

CVE-2017-0195 affects Microsoft SharePoint/Office Web Apps stack (e.g., SharePoint Server, Excel Services, Excel Web Apps, Office Web Apps Server, Office Online Server). The vulnerability enables remote attackers to perform cross-site scripting and to run script with local user privileges via a c...

PT-2017-10456

Name of the Vulnerable Software and Affected Versions Microsoft Excel Services on Microsoft SharePoint Server 2010 versions SP1 through SP2 Microsoft Excel Web Apps 2010 version SP2 Microsoft Office Web Apps 2010 version SP2 Microsoft Office Web Apps Server 2013 version SP1 Office Online Server...

Microsoft SharePoint Server Excel Services Elevation of Privilege Vulnerability (3191840)

This host is missing an important security update according to Microsoft security updates KB3191840 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2017-0195: Improper Neutralization of Input During Web Page Generation

Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps Server 2013 SP1 and Office Online Server allows remote attackers to perform cross-site scripting and run script with local use...

Description of the security update for SharePoint Server 2010 Office Web Apps: April 11, 2017

Description of the security update for SharePoint Server 2010 Office Web Apps: April 11, 2017 This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

Microsoft Office XSS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Office Web Apps server. The attacker who successful...

The vulnerability of Microsoft Excel, a software in the Microsoft Office Web Apps suite, allows a malicious actor to trigger a service failure or execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft Office Web Apps is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption by...