CVE Feed

    Dashboard / CVE / CVE-2014-1813

    CVE-2014-1813

    Microsoft Web Applications 2010 SP1 and SP2 allows remote authenticated users to execute arbitrary code via crafted page content, aka "Web Applications Page Content Vulnerability."

    Published:May 14, 2014
    Last Modified:Apr 12, 2025
    EPS:May 14, 2014
    EPSS Score:0.20167
    CVSS Score:8.5

    Affected Products

    Vendor
    Microsoft
    Product
    Web Applications

    Exploits

    No exploit reference

    Related CVEs

    CVE-2018-8160 (CVSS 6.5) — An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Inf…
    CVE-2017-0243 (CVSS 7.8) — Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory…
    CVE-2015-0086 (CVSS 9.3) — Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Wo…
    CVE-2015-0085 (CVSS 9.3) — Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3,…
    CVE-2015-0064 (CVSS 9.3) — Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, W…
    CVE-2014-6357 (CVSS 9.3) — Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and S…
    CVE-2014-0251 (CVSS 9) — Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High