CVE-2015-6061: XSS
Cross-site scripting (XSS) vulnerability in Microsoft Skype for Business 2016, Lync 2010 and 2013 SP1, Lync 2010 Attendee, and Lync Room System allows remote attackers to inject arbitrary web script or HTML via an instant-message session, aka "Server Input Validation Information Disclosure Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6061?
CVE-2015-6061 is rated as a moderate severity cross-site scripting vulnerability.
How do I fix CVE-2015-6061?
To fix CVE-2015-6061, install the security updates provided by Microsoft for affected versions of Lync and Skype for Business.
What software versions are affected by CVE-2015-6061?
CVE-2015-6061 affects Microsoft Skype for Business 2016, Lync 2010, Lync 2013 SP1, and Lync Room System.
What kind of attack is possible with CVE-2015-6061?
CVE-2015-6061 allows remote attackers to inject arbitrary web scripts or HTML through an instant-message session.
Is user action required to exploit CVE-2015-6061?
Yes, user interaction is required as the target must engage in an instant-message session with the attacker.