Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:sharepoint_server:2010:*:*:*:*:*:*:*

part: a version: 2010 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductSharepoint Server (82ce0492-bc52-5489-8888-bb3a55722a58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-0064 vulnerable 2026-06-08 05:06:13.411968 Details available
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Office Remote Code Execution Vulnerability."
Published: 2015-02-11T02:00:00.000Z
Updated: 2024-08-06T03:55:27.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2539 vulnerable 2026-06-08 05:02:04.790527 Details available
Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability."
Published: 2012-12-12T00:00:00.000Z
Updated: 2025-10-22T00:05:45.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2528 not_vulnerable 2026-06-08 05:02:04.762791 Details available
Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Automation Services on Microsoft SharePoint Server 2010; and Office Web Apps 2010 SP1 allows remote attackers to execute arbitrary code via a crafted RTF document, aka "RTF File listid Use-After-Free Vulnerability."
Published: 2012-10-09T21:00:00.000Z
Updated: 2024-08-06T19:34:25.911Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1861 vulnerable 2026-06-08 05:00:51.182972 Details available
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username Vulnerability."
Published: 2012-07-10T21:00:00.000Z
Updated: 2024-08-06T19:08:38.567Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1860 vulnerable 2026-06-08 05:00:51.182461 Details available
Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service (data modification) by changing a parameter in a search-scope URL, aka "SharePoint Search Scope Vulnerability."
Published: 2012-07-10T21:00:00.000Z
Updated: 2024-08-06T19:08:38.512Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1859 vulnerable 2026-06-08 05:00:51.179106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0145 vulnerable 2026-06-08 05:00:39.621515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0144 vulnerable 2026-06-08 05:00:39.618742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1989 vulnerable 2026-06-08 04:58:03.402669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1893 vulnerable 2026-06-08 04:58:02.562427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1892 vulnerable 2026-06-08 04:58:02.558295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1890 vulnerable 2026-06-08 04:58:02.547103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0653 vulnerable 2026-06-08 04:56:38.497507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.