OW
Product
Office Web Apps
On CISA KEVExploited in the wild
106
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 67Medium 14Low 1
Watch
Add Office Web Apps to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-2520 | – | Oct 9 | Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3… Affected: 2010 |
| CVE-2012-1861 | – | Jul 10 | Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows… Affected: 2010; 2010 |
| CVE-2012-1860 | – | Jul 10 | Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search… Affected: 2010; 2010 |
| CVE-2012-1859 | – | Jul 10 | Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010… Affected: 2010; 2010 |
| CVE-2011-1892 | – | Sep 15 | Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and… Affected: 2010; 2010 |
| CVE-2010-3214 | – | Oct 13 | Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility… Affected: All versions, or not specified |