Office Communicator

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-1302 May 15, 03:36 CRITICAL Emergency

Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Epss exploitation probability 44.4% and no vendor patch available.

RCE Buffer Overflow Microsoft Lync Office Communicator +1

NVD

CVSS 2.0

9.3

EPSS

44.4%

CVE-2012-2520 Oct 09, 21:55 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Epss exploitation probability 24.2% and no vendor patch available.

XSS Microsoft Sharepoint Server Sharepoint Services Infopath +5

NVD

CVSS 2.0

4.3

EPSS

24.2%

CVE-2012-1858 Jun 12, 22:55 MEDIUM POC THREAT This Month

The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attributes and script,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 41.4%.

XSS Information Disclosure Microsoft Internet Explorer Lync +1

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

41.4%

CVE-2013-1302

EPSS 44% CVSS 9.3

CRITICAL Emergency

RCE Buffer Overflow Microsoft +3

NVD

CVE-2012-2520

EPSS 24% CVSS 4.3

MEDIUM This Month

XSS Microsoft Sharepoint Server +7

NVD

CVE-2012-1858

EPSS 41% CVSS 4.3

MEDIUM POC THREAT This Month

XSS Information Disclosure Microsoft +3

NVD Exploit-DB