cbcvebase.
CVE-2019-1445
published 2019-11-12

CVE-2019-1445: A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online…

medium5.4CVSS 3.1
AVNACLPRNUIRSUCLILAN
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1447.

Affected

2 ranges
VendorProductVersion rangeFixed in
microsoftoffice_online_server
msrcoffice_online_server