CVE-2026-66304 Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over…

Description

Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Skype for Business Server 2015 CU13 6.0	premières → < 6.0.9319.885	6.0.9319.885
Skype for Business Server 2019 CU8 7.0	premières → < 7.0.2046.569	7.0.2046.569
Skype for Business Server Subscription Edition CU1 7.0	premières → < 7.0.2046.879	7.0.2046.879

Autres CVE de Skype for Business Server 2015 CU13

Les 17 CVE de Skype for Business Server 2015 CU13 →

CVE-2026-83746 Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges… 8.1 Élevée CVE-2026-85873 Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over… 6.5 Moyenne CVE-2026-70297 Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a… 8.8 Élevée CVE-2026-66307 Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a… 7.5 Élevée