CVE-2020-0647 - A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Spoofing Vulnerability'

Back Back to CVE browser

MEDIUM

A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Spoofing Vulnerability'

Published Jan 14, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 0.92%

Description

A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Spoofing Vulnerability'.

Affected products

Vendor Microsoft Product Office Online Server Default
unknown
Affected
- unspecified

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Office Online Server	unknown	Affected unspecified

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-346

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2141
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0647
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2141		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0647		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Jan 14, 2020

Updated Aug 4, 2024

Reserved Nov 4, 2019

Link CVE-2020-0647

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-0647

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Jan 14, 2020

Updated Aug 4, 2024

Link EUVD-2020-2141

GitHub

No data