CVE Feed

    Dashboard / CVE / CVE-2008-4032

    CVE-2008-4032

    Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."

    Published:Dec 10, 2008
    Last Modified:Apr 23, 2026
    EPS:Dec 10, 2008
    EPSS Score:0.59434
    CVSS Score:7.5

    Affected Products

    Vendor
    Microsoft
    Product
    Office Sharepoint Server
    Vendor
    Microsoft
    Product
    Search Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2025-62204 (CVSS 8) — Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code…
    CVE-2015-2558 (CVSS 9.3) — Use-after-free vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, E…
    CVE-2012-1863 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows ShareP…
    CVE-2010-0257 (CVSS 9.3) — Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers t…
    CVE-2010-0260 (CVSS 9.3) — Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Of…
    CVE-2010-0258 (CVSS 7.8) — Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File F…
    CVE-2010-0261 (CVSS 9.3) — Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, …
    CVE-2010-0262 (CVSS 9.3) — Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, w…
    CVE-2010-0264 (CVSS 9.3) — Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do n…
    CVE-2010-0263 (CVSS 9.3) — Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office E…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High