Microsoft Lync_server
16 CVEs affecting Microsoft Lync_server. Latest disclosed: 2022-07-12. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-33633 | High | 7.2 | 2022-07-12 | Skype for Business and Lync Remote Code Execution Vulnerability |
CVE-2021-26422 | High | 7.2 | 2021-05-11 | Skype for Business and Lync Remote Code Execution Vulnerability |
CVE-2022-26911 | Medium | 6.5 | 2022-04-15 | Skype for Business Information Disclosure Vulnerability |
CVE-2021-26421 | Medium | 6.5 | 2021-05-11 | Skype for Business and Lync Spoofing Vulnerability |
CVE-2021-24099 | Medium | 6.5 | 2021-02-25 | Skype for Business and Lync Denial of Service Vulnerability |
CVE-2021-24073 | Medium | 6.5 | 2021-02-25 | Skype for Business and Lync Spoofing Vulnerability |
CVE-2019-0798 | Medium | 6.1 | 2019-04-09 | A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business… |
CVE-2019-1029 | Medium | 5.9 | 2019-06-12 | A denial of service vulnerability exists in Skype for Business. An attacker who successfully exploited the vulnerability could cause Skype for Business to stop… |
CVE-2015-2536 | | 2015-09-09 | Cross-site scripting (XSS) vulnerability in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web scrip… | |
CVE-2015-2532 | | 2015-09-09 | Cross-site scripting (XSS) vulnerability in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "L… | |
CVE-2015-2531 | | 2015-09-09 | Cross-site scripting (XSS) vulnerability in the jQuery engine in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to injec… | |
CVE-2014-4071 | | 2014-09-10 | The Server in Microsoft Lync Server 2013 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon hang) via a crafted request… | |
CVE-2014-4070 | | 2014-09-10 | Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or H… | |
CVE-2014-4068 | | 2014-09-10 | The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptions, which allows r… | |
CVE-2014-1823 | | 2014-06-11 | Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inject arbitrary web sc… | |
CVE-2013-1302 | | 2013-05-15 | Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to… |