{"affected":[{"affectedData":[{"product":"Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Microsoft Visual Studio 2019","vendor":"Microsoft","versions":[{"status":"affected","version":"16.0"}]},{"product":"Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*","matchCriteriaId":"80B7A8C1-9168-4467-8B96-5024C6639EFB","versionEndIncluding":"15.8","versionStartIncluding":"15.1","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*","matchCriteriaId":"7FE5FF31-110B-4518-A0B9-E94E2840B492","versionEndIncluding":"16.3","versionStartIncluding":"16.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'."},{"lang":"es","value":"Existe una vulnerabilidad de suplantación de identidad en Microsoft Visual Studio, ya que incluye una URL de respuesta que no está protegida por SSL, también se conoce como \"Microsoft Visual Studio Spoofing Vulnerability\"."}],"id":"CVE-2020-0884","lastModified":"2026-06-17T02:46:54.100","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":4.3,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.7,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-03-12T16:15:20.453","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0884"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0884"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-319"}],"source":"nvd@nist.gov","type":"Primary"}]}