Web Applications
Vendor:
First CVE: May 14, 2014 · Active for 12 years
8
Total CVEs
More Total CVEs than 85% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
8.6
Avg CVSS
Higher Avg CVSS than 77% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Web Applications over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 14, 2014
12 years ago
Most Recent CVE
May 9, 2018
2,998 days ago
CVE Severity & Scoring
Web Applications8 CVEs
13%
88%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local1 (12.5%)
Network1 (12.5%)
Unknown6 (75.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low2 (25.0%)
High0 (0.0%)
Unknown6 (75.0%)
User Interaction
None0 (0.0%)
Unknown6 (75.0%)
Required2 (25.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None2 (25.0%)
Unknown6 (75.0%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2015-0064HIGH Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack S | Feb 11, 2015 | 9.3 | 49 | NO | YES |
CVE-2017-0243HIGH Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE | Jul 11, 2017 | 7.8 | 36 | NO | NO |
CVE-2014-6357HIGH Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, Office Compatibility Pack SP3, W | Dec 11, 2014 | 9.3 | 35 | NO | NO |
CVE-2015-0085HIGH Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, | Mar 11, 2015 | 9.3 | 30 | NO | NO |
CVE-2015-0086HIGH Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on | Mar 11, 2015 | 9.3 | 28 | NO | NO |
CVE-2014-0251HIGH Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Pr | May 14, 2014 | 9.0 | 27 | NO | NO |
CVE-2014-1813HIGH Microsoft Web Applications 2010 SP1 and SP2 allows remote authenticated users to execute arbitrary code via crafted page content, aka "Web Applications Page Content Vulnerability." | May 14, 2014 | 8.5 | 25 | NO | NO |
CVE-2018-8160MEDIUM An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Word, Microsoft Offic | May 9, 2018 | 6.5 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
12.5% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Web Applications
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2013 | 1 | 9.3 | 14.3% | 0 | 0 |
| 2010 | 8 | 8.7 | 15.1% | 0 | 1 |