Office Web Apps Security Vulnerabilities and Issues — Office Web Apps CVE List

Lucene search

MicrosoftOffice Web Apps

11 matches found

CVE•added 2013/09/11 2:3 p.m.•146 views

CVE-2013-3848

Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corrupti...

9.3CVSS7.5AI score0.61623EPSS

CVE•added 2013/09/11 2:3 p.m.•140 views

CVE-2013-1330

The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 does not set the EnableViewStateMac attribute, which allows remote attackers to execute arbitrary code by leveraging an unassigned workflow, aka "MAC D...

10CVSS7.4AI score0.67297EPSS

CVE•added 2013/09/11 2:3 p.m.•133 views

CVE-2013-1315

Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (...

9.3CVSS7.6AI score0.69342EPSS

CVE•added 2013/10/09 2:53 p.m.•129 views

CVE-2013-3895

Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."

6.8CVSS6.7AI score0.13684EPSS

CVE•added 2013/09/11 2:3 p.m.•70 views

CVE-2013-3849

9.3CVSS7.5AI score0.61623EPSS

CVE•added 2013/09/11 2:3 p.m.•60 views

CVE-2013-3847

9.3CVSS7.5AI score0.61623EPSS

CVE•added 2013/12/11 12:55 a.m.•60 views

CVE-2013-5059

Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerabilities."

6.8CVSS7.6AI score0.11014EPSS

CVE•added 2013/10/09 2:53 p.m.•55 views

CVE-2013-3889

Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel Services and Word Automation Services in SharePoint Server 2013 allow remote attackers to execute arbitrar...

9.3CVSS7.4AI score0.5514EPSS

CVE•added 2013/09/11 2:3 p.m.•53 views

CVE-2013-3857

Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1 and SP2, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of ...

9.3CVSS7.6AI score0.5796EPSS

CVE•added 2013/09/11 2:3 p.m.•52 views

CVE-2013-3858

9.3CVSS7.5AI score0.61623EPSS

CVE•added 2013/04/09 10:55 p.m.•47 views

CVE-2013-1289

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."

4.3CVSS5.4AI score0.61898EPSS