Microsoft Groove Server vulnerabilities

6 CVEs affecting Microsoft Groove Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1289, published 2013-04-09.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-1892, published 2011-09-15. Medium severity, CVSS 4.0. EPSS: 41.4% chance of exploitation in the next 30 days. Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove…
• CVE-2012-2520, published 2012-10-09. Medium severity, CVSS 4.3. EPSS: 34.3% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1,…
• CVE-2013-0007, published 2013-01-09. High severity, CVSS 9.3. EPSS: 31.6% chance of exploitation in the next 30 days. Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT…
• CVE-2013-0006, published 2013-01-09. High severity, CVSS 8.8. EPSS: 28.1% chance of exploitation in the next 30 days. Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer…
• CVE-2010-3324, published 2010-09-17. Medium severity, CVSS 4.3. EPSS: 25% chance of exploitation in the next 30 days. The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, Office SharePoint Server 2007 SP2,…
• CVE-2013-1289, published 2013-04-09. Medium severity, CVSS 4.3. EPSS: 15.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to…