Known vulnerabilities in Microsoft Office Web Apps Server 2013 Service Pack 1 - page 2

Vendor: Microsoft
Software: Microsoft Office Web Apps Server
Version: 2013 Service Pack 1
Software CPE: cpe:2.3:a:microsoft:microsoft_office_web_apps_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 50
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Office Web Apps Server version 2013 Service Pack 1 Microsoft Office Web Apps Server 2013 Service Pack 1 is affected by 50 vulnerabilities: 37 high, 8 medium, 5 low Critical High Medium Low

Vulnerabilities (50)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56573 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-38655		 CWE-94 High
No
No
 - 14.09.2021 SB2021091443
#VU54805 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34518		 CWE-94 High
No
No
 - 13.07.2021 SB2021071359
#VU53912 - Use After Free
CVE-2021-31939		 CWE-416 High
Public exploit available
No
 - 08.06.2021 SB2021060831
#VU53112 - Out-of-bounds read
CVE-2021-31174		 CWE-125 Low
Public exploit available
No
 - 11.05.2021 SB2021051131
#VU53073 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31179		 CWE-94 High
Public exploit available
No
 - 11.05.2021 SB2021051110
#VU53072 - Out-of-bounds read
CVE-2021-31178		 CWE-125 Medium
Public exploit available
No
 - 11.05.2021 SB2021051110
#VU53071 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31177		 CWE-94 High
No
No
 - 11.05.2021 SB2021051110
#VU53069 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31175		 CWE-94 High
No
No
 - 11.05.2021 SB2021051110
#VU52143 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28453		 CWE-94 High
No
No
 - 13.04.2021 SB2021041329
#VU52112 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28456		 CWE-200 Medium
No
No
 - 13.04.2021 SB2021041314
#VU52111 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28451		 CWE-94 High
No
No
 - 13.04.2021 SB2021041314
#VU52110 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28454		 CWE-94 High
No
No
 - 13.04.2021 SB2021041314
#VU51330 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-27053		 CWE-94 High
No
No
 - 09.03.2021 SB2021030940
#VU51329 - Use After Free
CVE-2021-27054		 CWE-416 High
No
No
 - 09.03.2021 SB2021030940
#VU50466 - Improper input validation
CVE-2021-24069		 CWE-20 High
No
No
 - 09.02.2021 SB2021020929
#VU50465 - Improper input validation
CVE-2021-24068		 CWE-20 High
No
No
 - 09.02.2021 SB2021020929
#VU50464 - Improper input validation
CVE-2021-24067		 CWE-20 High
No
No
 - 09.02.2021 SB2021020929
#VU50463 - Improper input validation
CVE-2021-24070		 CWE-20 High
No
No
 - 09.02.2021 SB2021020929
#VU49431 - Improper input validation
CVE-2021-1716		 CWE-20 High
No
No
 - 12.01.2021 SB2021011228
#VU49430 - Improper input validation
CVE-2021-1715		 CWE-20 High
No
No
 - 12.01.2021 SB2021011228


Showing elements 21 - 40 out of 50