Medium severity5.4NVD Advisory· Published Nov 12, 2019· Updated Jun 17, 2026
CVE-2019-1447
CVE-2019-1447
Description
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1445.
Affected products
3cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1447nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.