Medium severity5.4NVD Advisory· Published Feb 11, 2020· Updated Jun 17, 2026
CVE-2020-0695
CVE-2020-0695
Description
A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka 'Microsoft Office Online Server Spoofing Vulnerability'.
Affected products
3cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0695nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.