CVE-2022-26911 Skype for Business Information Disclosure Vulnerability

🗓️ 15 Apr 2022 19:05:48Reported by microsoftType

Skype for Business Information Disclosure Vulnerability CVE-2022-2691

Reporter	Title	Published	Views	Family All 16
ATTACKERKB	CVE-2022-26911	15 Apr 202219:15	–	attackerkb
BDU FSTEC	The vulnerability of Skype for Business Server (Microsoft Lync Server) in corporate communication servers lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.	17 Jun 202200:00	–	bdu_fstec
Circl	CVE-2022-26911	20 Jul 202215:37	–	circl
CNNVD	Microsoft Skype for Business Server 信息泄露漏洞	12 Apr 202200:00	–	cnnvd
CVE	CVE-2022-26911	15 Apr 202219:05	–	cve
Microsoft KB	Description of the security update for Skype for Business Lync Server 2013: April 12, 2022 (KB5012681)	12 Apr 202208:00	–	mskb
Microsoft KB	Description of the security update for Skype for Business Server: April 12, 2022 (KB5012686)	12 Apr 202208:00	–	mskb
Kaspersky	KLA12507 Multiple vulnerabilities in Microsoft Office	12 Apr 202200:00	–	kaspersky
Microsoft CVE	Skype for Business Information Disclosure Vulnerability	12 Apr 202208:00	–	mscve
NCSC	Vulnerabilities fixed in Microsoft Office	12 Apr 202200:00	–	ncsc

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Lync Server 2013 CU10",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "8308.0",
        "lessThan": "8308.1194",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Skype for Business Server 2015 CU12",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "9319.0",
        "lessThan": "9319.628",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Skype for Business Server 2019 CU6",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "2046.0",
        "lessThan": "9319.628",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26911

02 Jan 2025 18:52Current

7High risk

Vulners AI Score7

CVSS 3.16.5

EPSS0.0324