Unscored severity · published May 14, 2014
CVE-2014-1813
Microsoft Web Applications 2010 SP1 and SP2 allows remote authenticated users to execute arbitrary code via crafted page content, aka "Web Applications Page Content Vulnerability."
–
CVSS
10.4%
EPSS
No
On KEV
Exploitation
Is it being used?
Exploit prediction (EPSS)10.4% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
Web Applications · Microsoft
2010; 2010 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-1813
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-1813
www.securitytracker.com
http://www.securitytracker.com/id/1030227
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-022
More from Web Applications
7.8
CVE-2017-0243
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability"
6.5
CVE-2018-8160
An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Word, Microsoft…
–
CVE-2015-0086
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on…
–
CVE-2015-0085
Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2,…
–
CVE-2015-0064
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack…