CVE-2020-0695

CVE-2020-0695 is a vulnerability in Microsoft Office Online Server where cross-origin requests are not validated correctly. An attacker could perform cross-origin attacks, potentially reading data and acting on behalf of an authenticated user. Microsoft issued a security update (KB 4484254) in Fe...

CVE-2020-0695

A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Server Spoofing Vulnerability'...

Security Updates for Microsoft Office Online Server (February 2020)

The Microsoft Office Online Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly. An attacker...