Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

microsoft excel services - vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2019-12415
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an malicious user to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Pro...
Apache PoiOracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Banking Platform 2.4.0Oracle Enterprise Manager Base Platform 12.1.0.5Oracle Flexcube Private Banking 12.0.0Oracle Banking Platform 2.4.1Oracle Enterprise Repository 12.1.3.0.0Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Insurance Rules Palette 10.2.0Oracle Application Testing Suite 12.5.0.3Oracle Webcenter Portal 12.2.1.3.0Oracle Banking Payments 14.0.0Oracle Webcenter Sites 12.2.1.3.0Oracle Banking Payments 14.1.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Application Testing Suite 13.1.0.1Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Retail Order Broker 15.0Oracle Retail Order Broker 16.0
9.3
CVSSv2
CVE-2018-1028
A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Mi...
Microsoft Sharepoint Enterprise Server 2016Microsoft Office Web Apps 2010Microsoft Excel Services -Microsoft Word Automation Services -Microsoft Office 2016Microsoft Office 2013Microsoft Office 2013 RtMicrosoft Office 2010Microsoft Sharepoint Enterprise Server 2013Microsoft Office Web Apps 2013
7.6
CVSSv2
CVE-2017-11855
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an malicious user to gain the same us...
Microsoft Internet Explorer 11Microsoft Internet Explorer 10Microsoft Internet Explorer 9
9.3
CVSSv2
CVE-2017-8744
A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, and Microsoft Excel 2016 when they fail to properly handle object...
Microsoft Office 2010Microsoft Office 2013Microsoft Office 2007Microsoft Office 2016
9.3
CVSSv2
CVE-2017-8631
A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft O...
Microsoft Excel 2013Microsoft Excel 2016Microsoft Office Compatibility Pack -Microsoft Excel 2010Microsoft Office Web Apps 2013Microsoft Excel 2007Microsoft Office Online ServerMicrosoft Excel Viewer 2007Microsoft Excel Web App 2013
3.5
CVSSv2
CVE-2017-0195
Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps Server 2013 SP1 and Office Online Server allows remote malicious users to perform cross-site scripting and ru...
Microsoft Office Online ServerMicrosoft Sharepoint Server 2010Microsoft Office Web Apps Server 2013Microsoft Office Web Apps 2010Microsoft Excel Web App 2010
9.3
CVSSv2
CVE-2017-0052
Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memor...
Microsoft Sharepoint Server 2007Microsoft Office Compatibility PackMicrosoft Excel ViewerMicrosoft Excel 2007
9.3
CVSSv2
CVE-2017-0006
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memor...
Microsoft Office Compatibility PackMicrosoft Excel 2007Microsoft Sharepoint Server 2007Microsoft Excel Viewer
2.6
CVSSv2
CVE-2017-0027
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2013 SP1 allow remote malicious users to obtain sensitive information from process memory via a crafted Office document, aka "Micro...
Microsoft Excel 2016Microsoft Excel 2010Microsoft Excel 2013Microsoft Office Compatibility PackMicrosoft Sharepoint Server 2013Microsoft Excel 2007
5.8
CVSSv2
CVE-2016-7265
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote malicious users to obtain sensitive in...
Microsoft Excel 2013Microsoft Excel 2010Microsoft Excel ViewerMicrosoft Office Compatibility PackMicrosoft Sharepoint Server 2007Microsoft Sharepoint Server 2010Microsoft Excel 2007Microsoft Excel 2016
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook