Microsoft Office Web Apps Server 2013

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:office_web_apps_server:2013:*:*:*:*:*:*:*

part: a version: 2013 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductOffice Web Apps Server (80d9de41-c514-5570-bbc1-a61cbf445614)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-8509 vulnerable 2026-06-08 05:10:08.385006 Details available
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.
Published: 2017-06-15T01:00:00.000Z
Updated: 2024-08-05T16:41:23.029Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1761 vulnerable 2026-06-08 05:05:26.296069 Details available
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014.
Published: 2014-03-24T19:00:00.000Z
Updated: 2025-10-22T00:05:38.376Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1754 vulnerable 2026-06-08 05:05:26.275394 Details available
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013 Client Components SDK allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability."
Published: 2014-05-14T10:00:00.000Z
Updated: 2024-08-06T09:50:11.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0260 vulnerable 2026-06-08 05:05:12.503837 Details available
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability."
Published: 2014-01-15T02:00:00.000Z
Updated: 2024-08-06T09:13:09.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0251 vulnerable 2026-06-08 05:05:12.466552 Details available
Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 Gold and SP1; Web Applications 2010 SP1 and SP2; Office Web Apps Server 2013 Gold and SP1; SharePoint Server 2013 Client Components SDK; and SharePoint Designer 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerability."
Published: 2014-05-14T10:00:00.000Z
Updated: 2024-08-06T09:05:39.382Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.