CVE-2022-33633
Published Jul 12, 2022Skype for Business and Lync Remote Code Execution Vulnerability
Vendor/product archive
microsoft / lync_server CVEs
Beta · best-effort16 CVEs tagged to microsoft / lync_server — 1 Critical, 2 High, 13 Medium, 0 Low, 0 Unrated.
CVE-2022-26911
Published Apr 15, 2022Skype for Business Information Disclosure Vulnerability
CVE-2021-26422
Published May 11, 2021Skype for Business and Lync Remote Code Execution Vulnerability
CVE-2021-26421
Published May 11, 2021Skype for Business and Lync Spoofing Vulnerability
CVE-2021-24099
Published Feb 25, 2021Skype for Business and Lync Denial of Service Vulnerability
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2021-24073
Published Feb 25, 2021Skype for Business and Lync Spoofing Vulnerability
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-1029
Published Jun 12, 2019A denial of service vulnerability exists in Skype for Business. An attacker who successfully exploited the vulnerability could cause Skype for Business to stop responding. Note th…
CVE-2019-0798
Published Apr 9, 2019A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business and Lync Spoofing V…
CVE-2015-2536
Published Sep 9, 2015Cross-site scripting (XSS) vulnerability in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a craf…
CVE-2015-2532
Published Sep 9, 2015Cross-site scripting (XSS) vulnerability in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Lync Server XSS Infor…
CVE-2015-2531
Published Sep 9, 2015Cross-site scripting (XSS) vulnerability in the jQuery engine in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web scri…
CVE-2014-4071
Published Sep 10, 2014The Server in Microsoft Lync Server 2013 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon hang) via a crafted request, aka "Lync Denial of…
CVE-2014-4070
Published Sep 10, 2014Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted UR…
CVE-2014-4068
Published Sep 10, 2014The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptions, which allows remote attackers to c…
CVE-2014-1823
Published Jun 11, 2014Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inject arbitrary web script or HTML via a c…
CVE-2013-1302
Published May 15, 2013Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary co…
Showing 1-16 of 16 CVEsPage 1 of 1