Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:*:*:*:*:*:*

part: a version: 2007 update: sp2

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductSharepoint Server (82ce0492-bc52-5489-8888-bb3a55722a58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-0007 vulnerable 2026-06-08 05:03:01.658904 Details available
Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability."
Published: 2013-01-09T18:00:00.000Z
Updated: 2024-08-06T14:10:56.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0006 vulnerable 2026-06-08 05:03:01.656439 Details available
Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability."
Published: 2013-01-09T18:00:00.000Z
Updated: 2025-01-16T20:51:20.538Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2520 vulnerable 2026-06-08 05:02:04.745927 Details available
Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1, Groove Server 2010 SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
Published: 2012-10-09T21:00:00.000Z
Updated: 2024-08-06T19:34:25.841Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1889 not_vulnerable 2026-06-08 05:00:51.251327 Details available
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Published: 2012-06-13T01:00:00.000Z
Updated: 2025-10-22T00:05:47.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1863 vulnerable 2026-06-08 05:00:51.188388 Details available
Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List Parameter Vulnerability."
Published: 2012-07-10T21:00:00.000Z
Updated: 2024-08-06T19:08:38.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1862 vulnerable 2026-06-08 05:00:51.183291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1860 vulnerable 2026-06-08 05:00:51.181848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3324 vulnerable 2026-06-08 04:55:14.168305 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.