Home

CVE-2020-1442

Description

A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka Office Web Apps XSS Vulnerability.

Risk Information

Base Score
6.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.607

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Word Remote Code Execution Vulnerability for Microsoft Office Web Apps Server 2013 (KB4484357)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-29294Security Update for Microsoft Office Web Apps Server 2013 (KB4484357)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234