Known vulnerabilities in Microsoft Office Web Apps Server 2013 Service Pack 1

Vendor: Microsoft
Software: Microsoft Office Web Apps Server
Version: 2013 Service Pack 1
Software CPE: cpe:2.3:a:microsoft:microsoft_office_web_apps_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 50
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Office Web Apps Server version 2013 Service Pack 1 Microsoft Office Web Apps Server 2013 Service Pack 1 is affected by 50 vulnerabilities: 37 high, 8 medium, 5 low Critical High Medium Low

Vulnerabilities (50)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73595 - Improper input validation
CVE-2023-23396		 CWE-20 Medium
No
No
 - 14.03.2023 SB2023031456
#VU73573 - Improper input validation
CVE-2023-23399		 CWE-20 High
Public exploit available
No
 - 14.03.2023 SB2023031456
#VU69143 - Improper input validation
CVE-2022-41063		 CWE-20 High
No
No
 - 09.11.2022 SB2022110904
#VU69142 - Improper input validation
CVE-2022-41106		 CWE-20 High
No
No
 - 09.11.2022 SB2022110904
#VU69087 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41060		 CWE-200 Medium
No
No
 - 08.11.2022 SB2022110818
#VU69086 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41103		 CWE-200 Medium
No
No
 - 08.11.2022 SB2022110818
#VU69085 - Improper input validation
CVE-2022-41061		 CWE-20 High
No
No
 - 08.11.2022 SB2022110818
#VU64284 - Improper input validation
CVE-2022-30173		 CWE-20 High
No
No
 - 14.06.2022 SB2022061427
#VU64283 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30159		 CWE-200 Medium
No
No
 - 14.06.2022 SB2022061426
#VU64281 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30172		 CWE-200 Medium
No
No
 - 14.06.2022 SB2022061426
#VU64280 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30171		 CWE-200 Medium
No
No
 - 14.06.2022 SB2022061426
#VU62984 - Improper input validation
CVE-2022-29110		 CWE-20 High
No
No
 - 10.05.2022 SB2022051041
#VU62095 - Use After Free
CVE-2022-26901		 CWE-416 High
No
No
 - 12.04.2022 SB2022041224
#VU60420 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22716		 CWE-200 Low
No
No
 - 08.02.2022 SB2022020841
#VU59476 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21840		 CWE-94 High
No
No
 - 11.01.2022 SB2022011159
#VU58907 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43256		 CWE-94 High
No
No
 - 14.12.2021 SB2021121447
#VU58070 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40442		 CWE-94 High
No
No
 - 09.11.2021 SB2021110941
#VU57267 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40472		 CWE-200 Low
No
No
 - 12.10.2021 SB2021101217
#VU57264 - Use After Free
CVE-2021-40474		 CWE-416 High
Public exploit available
No
 - 12.10.2021 SB2021101217
#VU57261 - Use After Free
CVE-2021-40486		 CWE-416 High
No
No
 - 12.10.2021 SB2021101216


Showing elements 1 - 20 out of 50