Known vulnerabilities in Office Online Server - page 7

Vendor: Microsoft
Software: Office Online Server
Software CPE: cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 222
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Office Online Server Office Online Server is affected by 222 known vulnerabilities: 1 critical, 170 high, 31 medium, 20 low Critical High Medium Low

Vulnerabilities (222)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79174 - Improper input validation
CVE-2023-35371		 CWE-20 High
No
No
 - 08.08.2023 SB2023080880
#VU78180 - Exposure of sensitive information to an unauthorized actor
CVE-2023-33162		 CWE-200 Medium
No
No
 - 12.07.2023 SB2023071239
#VU77264 - Improper input validation
CVE-2023-33137		 CWE-20 High
Available
No
 - 13.06.2023 SB2023061375
#VU77263 - Improper input validation
CVE-2023-32029		 CWE-20 High
No
No
 - 13.06.2023 SB2023061375
#VU77260 - Improper input validation
CVE-2023-33133		 CWE-20 High
No
No
 - 13.06.2023 SB2023061375
#VU75899 - Improper input validation
CVE-2023-24953		 CWE-20 High
No
No
 - 09.05.2023 SB2023050993
#VU73595 - Improper input validation
CVE-2023-23396		 CWE-20 Medium
No
No
 - 14.03.2023 SB2023031456
#VU73573 - Improper input validation
CVE-2023-23399		 CWE-20 High
Available
No
 - 14.03.2023 SB2023031456
#VU69143 - Improper input validation
CVE-2022-41063		 CWE-20 High
No
No
 - 09.11.2022 SB2022110904
#VU69142 - Improper input validation
CVE-2022-41106		 CWE-20 High
No
No
 - 09.11.2022 SB2022110904
#VU69087 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41060		 CWE-200 Medium
No
No
 - 08.11.2022 SB2022110818
#VU69086 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41103		 CWE-200 Medium
No
No
 - 08.11.2022 SB2022110818
#VU69085 - Improper input validation
CVE-2022-41061		 CWE-20 High
No
No
 - 08.11.2022 SB2022110818
#VU66344 - Improper input validation
CVE-2022-33648		 CWE-20 High
No
No
 - 10.08.2022 SB2022081010
#VU64283 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30159		 CWE-200 Medium
No
No
 - 14.06.2022 SB2022061426
#VU64281 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30172		 CWE-200 Medium
No
No
 - 14.06.2022 SB2022061426
#VU64280 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30171		 CWE-200 Medium
No
No
 - 14.06.2022 SB2022061426
#VU62985 - Improper input validation
CVE-2022-29109		 CWE-20 High
No
No
 - 10.05.2022 SB2022051041
#VU62095 - Use After Free
CVE-2022-26901		 CWE-416 High
No
No
 - 12.04.2022 SB2022041224
#VU60420 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22716		 CWE-200 Low
No
No
 - 08.02.2022 SB2022020841


Showing elements 121 - 140 out of 222