Office Web Apps Server vulnerabilities | LiveThreat CVE Feed

Product

Office Web Apps Server

by Microsoft · last CVE Mar 14, 2023

On CISA KEVExploited in the wild

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities62 In the news0 Timeline

Severity mix

Critical 0High 42Medium 12Low 1

Severity

All severities62 Critical0 High42 Medium12 Low1

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Office Web Apps Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-31174	5.5	3%	May 11	Microsoft Excel Information Disclosure Vulnerability Affected: 2013
CVE-2021-28456	5.5	4%	Apr 13	Microsoft Excel Information Disclosure Vulnerability Affected: 2013
CVE-2019-0561	5.5	8%	Jan 8	An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects… Affected: 2010
CVE-2017-0195	5.4	4%	Apr 12	Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps Server… Affected: 2013
CVE-2018-0919	3.3	12%	Mar 14	Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013… Affected: 2013
CVE-2015-6093	–	23%	Nov 11	Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps… Affected: 2013
CVE-2015-1682	–	20%	May 13	Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Office 2013 RT SP1, Excel 2013… Affected: 2010; 2013
CVE-2015-0086	–	15%	Mar 11	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on… Affected: 2013; 2013
CVE-2015-0085	–	19%	Mar 11	Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2,… Affected: 2010; 2013; 2013
CVE-2014-1754	–	11%	May 14	Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and… Affected: 2013; 2013
CVE-2014-0251	–	14%	May 14	Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1;… Affected: 2013; 2013
CVE-2014-0260	–	18%	Jan 15	Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps… Affected: 2013