Where
-Infinity
0

Trending

Last week
Last month
Last year

Microsoft Skype for Business Server 2019 CU7Skype for Business Information Disclosure Vulnerability

Risk 34
Severity
5.7
AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Skype for Business Information Disclosure Vulnerability

First published (updated )
CVE-2024-20695

Microsoft Skype for Business Server 2015 CU13Skype for Business Remote Code Execution Vulnerability

Risk 66
Severity
7.2
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Skype for Business Remote Code Execution Vulnerability

First published (updated )
CVE-2023-36780

Microsoft Skype for Business Server 2015 CU13Skype for Business Remote Code Execution Vulnerability

Risk 66
Severity
7.2
Code Injection
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Skype for Business Remote Code Execution Vulnerability

First published (updated )
CVE-2023-36789

Microsoft Skype for Business Server 2015 CU13Skype for Business Remote Code Execution Vulnerability

Risk 66
Severity
7.2
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Skype for Business Remote Code Execution Vulnerability

First published (updated )
CVE-2023-36786

Microsoft Skype for BusinessMicrosoft Skype for Business Privilege Escalation Vulnerability

Risk 65
Severity
5.3
Exploited
SSRF
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation.

1 / 2
Source: CISA
First published (updated )
CVE-2023-41763

Microsoft Skype for Business Server 2019 CU6Skype for Business and Lync Remote Code Execution Vulnerability

Risk 66
Severity
7.2
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Skype for Business and Lync Remote Code Execution Vulnerability

First published (updated )
CVE-2022-33633

Microsoft Skype for Business Server 2019 CU6Skype for Business and Lync Spoofing Vulnerability

Risk 27
Severity
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Skype for Business and Lync Spoofing Vulnerability

First published (updated )
CVE-2022-26910

Microsoft Skype for Business Server 2019 CU6Skype for Business Information Disclosure Vulnerability

Risk 38
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Skype for Business Information Disclosure Vulnerability

First published (updated )
CVE-2022-26911

Microsoft Lync ServerSkype for Business and Lync Remote Code Execution Vulnerability

Risk 66
Severity
7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Skype for Business and Lync Remote Code Execution Vulnerability

First published (updated )
CVE-2021-26422

Microsoft Lync ServerSkype for Business and Lync Spoofing Vulnerability

Risk 47
Severity
7.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N

Skype for Business and Lync Spoofing Vulnerability

First published (updated )
CVE-2021-26421

Microsoft Lync ServerSkype for Business and Lync Denial of Service Vulnerability

Risk 38
Severity
6.5
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Skype for Business and Lync Denial of Service Vulnerability

First published (updated )
CVE-2021-24099

Microsoft Lync ServerSkype for Business and Lync Spoofing Vulnerability

Risk 47
Severity
7.1
AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N/E:P/RL:O/RC:C

Skype for Business and Lync Spoofing Vulnerability

First published (updated )
CVE-2021-24073

Microsoft Lync ServerXSS

Risk 38
Severity
6.1
XSS
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business and Lync Spoofing Vulnerability'.

First published (updated )
CVE-2019-0798

Microsoft Lync ServerXSS

Risk 22
Severity
4.3
XSS
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in the jQuery engine in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Skype for Business Server and Lync Server XSS Information Disclosure Vulnerability."

First published (updated )
CVE-2015-2531

Microsoft Lync ServerXSS

Risk 22
Severity
4.3
XSS
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Skype for Business Server and Lync Server XSS Elevation of Privilege Vulnerability."

First published (updated )
CVE-2015-2536

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203