CVE-2014-1813

CWE-94 — Code Injection3 documents3 sources

Severity

8.5HIGH

EPSS

20.2%

top 4.50%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft WEB Applications

Timeline

PublishedMay 14

Latest updateMay 14

Description

Microsoft Web Applications 2010 SP1 and SP2 allows remote authenticated users to execute arbitrary code via crafted page content, aka "Web Applications Page Content Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 6.8 | Impact: 10.0

Affected Packages1 packages

▶NVDmicrosoft/web_applications2010

🔴Vulnerability Details

GHSA

GHSA-f8f8-9jv7-q24v: Microsoft Web Applications 2010 SP1 and SP2 allows remote authenticated users to execute arbitrary code via crafted page content, aka "Web Application↗2022-05-14

▶

CVEList

CVE-2014-1813: Microsoft Web Applications 2010 SP1 and SP2 allows remote authenticated users to execute arbitrary code via crafted page content, aka "Web Application↗2014-05-14

▶