CVE-2020-0695

A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Server Spoofing Vulnerability'...

CVE-2020-0695

CVE-2020-0695 is a vulnerability in Microsoft Office Online Server where cross-origin requests are not validated correctly. An attacker could perform cross-origin attacks, potentially reading data and acting on behalf of an authenticated user. Microsoft issued a security update (KB 4484254) in Fe...

Security Updates for Microsoft Office Online Server (February 2020)

The Microsoft Office Online Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly. An attacker...