Medium severity5.4NVD Advisory· Published Jan 14, 2020· Updated Jun 17, 2026
CVE-2020-0647
CVE-2020-0647
Description
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Spoofing Vulnerability'.
Affected products
3cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0647nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.