6.5
Moyenne
CVE-2026-63523 Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an…
Description
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Skype for Business Server 2015 CU13 6.0 | premières → < 6.0.9319.885 | 6.0.9319.885 |
| Skype for Business Server 2019 CU8 7.0 | premières → < 7.0.2046.569 | 7.0.2046.569 |
| Skype for Business Server Subscription Edition CU1 7.0 | premières → < 7.0.2046.879 | 7.0.2046.879 |
Références
- Skype for Business Spoofing Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Skype for Business Server 2015 CU13
Les 17 CVE de Skype for Business Server 2015 CU13 →
CVE-2026-83746
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges…
8.1
Élevée
CVE-2026-85873
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over…
6.5
Moyenne
CVE-2026-70297
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a…
8.8
Élevée
CVE-2026-66307
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a…
7.5
Élevée