CVE Catalog
CVE-2021-34451
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk1.66%
74th percentile - higher than 74% of all known CVEs
Summary
A spoofing vulnerability in Microsoft Office Online Server allows an attacker to impersonate a trusted resource or user. Exploitation could lead to tricking users and disclosing sensitive information.
Risk Assessment
The risk includes potential phishing attacks and data theft in environments using Office Online Server.
Recommendation
It is recommended to apply the security updates provided by Microsoft for Office Online Server immediately.
Original NVD description (English source)
Microsoft Office Online Server Spoofing Vulnerability