CVE-2020-1442
No fix known EPSS 2%
A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'.
Products: Microsoft Office Online Server, Microsoft Office Web Apps