Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_2003_server:r2:sp2:*:*:*:*:*:*

part: o version: r2 update: sp2

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductWindows 2003 Server (4e1b015d-7054-5cfc-afa2-31769d6028d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2417 vulnerable 2026-06-08 05:06:34.972711 Details available
OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via crafted input, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "OLE Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2416.
Published: 2015-07-14T22:00:00.000Z
Updated: 2024-08-06T05:10:16.486Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2416 vulnerable 2026-06-08 05:06:34.972147 Details available
OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via crafted input, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "OLE Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2417.
Published: 2015-07-14T22:00:00.000Z
Updated: 2024-08-06T05:10:16.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2374 vulnerable 2026-06-08 05:06:34.932095 Details available
The Netlogon service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly implement domain-controller communication, which allows remote attackers to discover credentials by leveraging certain PDC access and spoofing the BDC role in a PDC communication channel, aka "Elevation of Privilege Vulnerability in Netlogon."
Published: 2015-07-14T21:00:00.000Z
Updated: 2024-08-06T05:10:16.013Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2371 vulnerable 2026-06-08 05:06:34.915747 Details available
The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action script associated with a .msi package, aka "Windows Installer EoP Vulnerability."
Published: 2015-07-14T22:00:00.000Z
Updated: 2024-08-06T05:10:16.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2370 vulnerable 2026-06-08 05:06:34.915175 Details available
The authentication implementation in the RPC subsystem in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not prevent DCE/RPC connection reflection, which allows local users to gain privileges via a crafted application, aka "Windows RPC Elevation of Privilege Vulnerability."
Published: 2015-07-14T22:00:00.000Z
Updated: 2024-08-06T05:10:16.189Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2367 vulnerable 2026-06-08 05:06:34.913727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2365 vulnerable 2026-06-08 05:06:34.912474 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2364 vulnerable 2026-06-08 05:06:34.911886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2363 vulnerable 2026-06-08 05:06:34.909903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1701 vulnerable 2026-06-08 05:06:26.094626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.