office_out-of-box_experience vulnerabilities

CVEs whose affected-version data names the office_out-of-box_experience package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-64677High· 8.2

Improper neutralization of input during web page generation ('cross-site scripting') in Office Out-of-Box Experience allows an unauthorized attacker to perform spoofing over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Office Out-of-Box Experience allows an unauthorized attacker to perform spoofing over a network.

▾ Twilightmicrosoft · office_out-of-box_experienceEPSS 0.49%via NVD

office_out-of-box_experience vulnerabilities (CVEs) · VulnSea