Microsoft Office Out-of-Box Experience Cross-Site Scripting Vulnerability Allowing Spoofing

A cross-site scripting vulnerability has been identified in the Office Out-of-Box Experience. This issue arises from improper input neutralization during web page generation, allowing an unauthorized attacker to perform spoofing over the network. The vulnerability affects all versions of Office Out-of-Box Experience.

Impact

Exploitation of this vulnerability could lead to spoofing attacks, allowing an attacker to impersonate another user or entity.