CVE-2008-4032
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not...
CVE-2008-4032 is a high vulnerability (CVSS 7.5) in Microsoft Office Sharepoint Server, published December 10, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 47.9%, the 98th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 47.9%EPSS, 98th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
Exploit likelihood
Affected products
What each source reports
NVD Score used
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
- Record
CVE-2008-4032- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE ListNo score
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
- Record
CVE-2008-4032- Updated
- 2026-11-02
EUVDEUVD-2008-4017No score
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
- Record
EUVD-2008-4017- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-49vg-6g45-5h6jNo score
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not...
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
- Record
GHSA-49vg-6g45-5h6j- Weakness
- CWE-287
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securitytracker.com/id?1021367
vupen.com/english/advisories/2008/3389
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5774
secunia.com/advisories/33063
us-cert.gov/cas/techalerts/TA08-344A.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-077
nvd.nist.gov/vuln/detail/CVE-2008-4032
github.com/advisories/GHSA-49vg-6g45-5h6j