CVE-2015-2531
- EPSS 15.2%
- Published 09.09.2015 00:59:43
- Last modified 12.04.2025 10:46:40
Cross-site scripting (XSS) vulnerability in the jQuery engine in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Skype for Business Server and Lync S...
- EPSS 31.15%
- Published 10.09.2014 01:55:09
- Last modified 12.04.2025 10:46:40
The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptions, which allows remote attackers to cause a denial of service (daemon hang) via a crafted call, aka "Lync De...
CVE-2014-4070
- EPSS 18.34%
- Published 10.09.2014 01:55:09
- Last modified 12.04.2025 10:46:40
Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Lync XSS Information Disclosure Vulnerability."
- EPSS 31.15%
- Published 10.09.2014 01:55:09
- Last modified 12.04.2025 10:46:40
The Server in Microsoft Lync Server 2013 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon hang) via a crafted request, aka "Lync Denial of Service Vulnerability."
CVE-2014-1823
- EPSS 25.98%
- Published 11.06.2014 04:56:18
- Last modified 12.04.2025 10:46:40
Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing a valid meeting ID, aka "Lync Server Content Sani...
CVE-2013-1302
- EPSS 56.45%
- Published 15.05.2013 03:36:33
- Last modified 11.04.2025 00:51:21
Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lyn...