GCVE - cpe:2.3:a:microsoft:office_web_apps:2010:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:office_web_apps:2010:*:*:*:*:*:*:*

part: a version: 2010 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Office Web Apps (`8e4a7e68-e4a2-5840-a29c-20f10fc70211`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-0797`	vulnerable	2026-06-08 05:10:24.810789	Details available Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word Memory Corruption Vulnerability". Published: 2018-01-10T01:00:00.000Z Updated: 2024-09-16T18:17:56.308Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/102406 http://www.securitytracker.com/id/1040153 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0797	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8509`	vulnerable	2026-06-08 05:10:08.384191	Details available A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506. Published: 2017-06-15T01:00:00.000Z Updated: 2024-08-05T16:41:23.029Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8509 http://www.securityfocus.com/bid/98812	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3895`	vulnerable	2026-06-08 05:04:33.092881	Details available Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability." Published: 2013-10-09T14:44:00.000Z Updated: 2024-08-06T16:22:01.505Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-084 http://www.us-cert.gov/ncas/alerts/TA13-288A http://blogs.technet.com/b/srd/archive/2013/10/08/assessing-risk-for-the-october-2013-security-updates.aspx https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18991	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1861`	vulnerable	2026-06-08 05:00:51.182892	Details available Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username Vulnerability." Published: 2012-07-10T21:00:00.000Z Updated: 2024-08-06T19:08:38.567Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA12-192A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-050 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15544	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1860`	vulnerable	2026-06-08 05:00:51.179521	Details available Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service (data modification) by changing a parameter in a search-scope URL, aka "SharePoint Search Scope Vulnerability." Published: 2012-07-10T21:00:00.000Z Updated: 2024-08-06T19:08:38.512Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-050 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15265	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1859`	vulnerable	2026-06-08 05:00:51.178443	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1892`	vulnerable	2026-06-08 04:58:02.556049	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.