Office Sharepoint Server
Vendor:
First CVE: Aug 14, 2007 · Active for 18 years
18
Total CVEs
More Total CVEs than 93% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
8.8
Avg CVSS
Higher Avg CVSS than 78% of tracked products
5.6%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Office Sharepoint Server over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 14, 2007
18 years ago
Most Recent CVE
Oct 14, 2015
3,938 days ago
CVE Severity & Scoring
Office Sharepoint Server18 CVEs
94%
All CVEs352,713 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local2 (11.1%)
Network0 (0.0%)
Unknown16 (88.9%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low2 (11.1%)
High0 (0.0%)
Unknown16 (88.9%)
User Interaction
None0 (0.0%)
Unknown16 (88.9%)
Required2 (11.1%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None2 (11.1%)
Unknown16 (88.9%)
Top CVEs
Signals from CVEs in this product scope (18 CVEs).
18 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2009-0557HIGH Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Conver | Jun 10, 2009 | 7.8 | 85 | YES | NO |
CVE-2007-2223HIGH Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which cau | Aug 14, 2007 | 9.3 | 66 | NO | YES |
CVE-2010-0258HIGH Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office C | Mar 10, 2010 | 7.8 | 51 | NO | NO |
CVE-2008-4032HIGH Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which a | Dec 10, 2008 | 7.5 | 42 | NO | NO |
CVE-2009-0561HIGH Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XM | Jun 10, 2009 | 9.3 | 41 | NO | NO |
CVE-2010-0261HIGH Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote atta | Mar 10, 2010 | 9.3 | 40 | NO | NO |
CVE-2009-1134HIGH Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and | Jun 10, 2009 | 9.3 | 40 | NO | NO |
CVE-2010-0262HIGH Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted s | Mar 10, 2010 | 9.3 | 39 | NO | NO |
CVE-2009-0558HIGH Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary c | Jun 10, 2009 | 9.3 | 38 | NO | NO |
CVE-2010-0263HIGH Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Office Compatibility Pack for Word, Excel, an | Mar 10, 2010 | 9.3 | 37 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (18 CVEs).
CISA KEV
1 CVE
5.6% of CVEs· 97th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
5.6% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (18 CVEs).
Media Mentions
Signals from CVEs in this product scope (18 CVEs).
Top CNAs Publishing CVEs For Office Sharepoint Server
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2007 | 17 | 8.8 | 29.9% | 1 | 0 |