Known vulnerabilities in Office Online Server 2016 - page 2

Vendor: Microsoft
Software: Office Online Server
Version: 2016
Software CPE: cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 81
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Office Online Server version 2016 Office Online Server 2016 is affected by 81 vulnerabilities: 60 high, 9 medium, 12 low Critical High Medium Low

Vulnerabilities (81)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52112 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28456		 CWE-200 Medium
No
No
 - 13.04.2021 SB2021041314
#VU51333 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-27057		 CWE-94 High
No
No
 - 09.03.2021 SB2021030942
#VU51330 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-27053		 CWE-94 High
No
No
 - 09.03.2021 SB2021030940
#VU51329 - Use After Free
CVE-2021-27054		 CWE-416 High
No
No
 - 09.03.2021 SB2021030940
#VU50466 - Improper input validation
CVE-2021-24069		 CWE-20 High
No
No
 - 09.02.2021 SB2021020929
#VU50464 - Improper input validation
CVE-2021-24067		 CWE-20 High
No
No
 - 09.02.2021 SB2021020929
#VU50463 - Improper input validation
CVE-2021-24070		 CWE-20 High
No
No
 - 09.02.2021 SB2021020929
#VU49431 - Improper input validation
CVE-2021-1716		 CWE-20 High
No
No
 - 12.01.2021 SB2021011228
#VU49430 - Improper input validation
CVE-2021-1715		 CWE-20 High
No
No
 - 12.01.2021 SB2021011228
#VU49429 - Improper input validation
CVE-2021-1714		 CWE-20 High
No
No
 - 12.01.2021 SB2021011227
#VU49428 - Improper input validation
CVE-2021-1713		 CWE-20 High
No
No
 - 12.01.2021 SB2021011227
#VU48847 - Memory corruption
CVE-2020-17129		 CWE-119 High
No
No
 - 08.12.2020 SB2020120818
#VU48846 - Memory corruption
CVE-2020-17128		 CWE-119 High
No
No
 - 08.12.2020 SB2020120818
#VU48844 - Out-of-bounds read
CVE-2020-17126		 CWE-125 Low
No
No
 - 08.12.2020 SB2020120818
#VU48842 - Memory corruption
CVE-2020-17123		 CWE-119 High
No
No
 - 08.12.2020 SB2020120818
#VU48840 - Use After Free
CVE-2020-17125		 CWE-416 High
No
No
 - 08.12.2020 SB2020120817
#VU48315 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-17065		 CWE-94 High
No
No
 - 10.11.2020 SB2020111054
#VU48314 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-17064		 CWE-94 High
No
No
 - 10.11.2020 SB2020111054
#VU47586 - Memory corruption
CVE-2020-16932		 CWE-119 High
No
No
 - 13.10.2020 SB2020101337
#VU47585 - Memory corruption
CVE-2020-16931		 CWE-119 High
No
No
 - 13.10.2020 SB2020101337


Showing elements 21 - 40 out of 81