61 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing a valid meeting ID, aka "Lync Server Content Sanitization Vulnerability."...
CVE-2014-1823
CVE-2014-1823 is an XSS vulnerability affecting Microsoft Lync Server 2010 and 2013, specifically in the Web Components Server. A crafted URL containing a valid meeting ID can be used to inject arbitrary web script or HTML remotely. Multiple connected advisories corroborate the issue as an inform...
CVE-2014-1823
Cross-site scripting XSS vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing a valid meeting ID, aka "Lync Server Content Sanitization Vulnerability."...
Microsoft Lync Server Information Disclosure Vulnerability (2969258)
This host is missing an important security update according to Microsoft Bulletin MS14-032. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS14-032: Vulnerability in Microsoft Lync Server Could Allow Information Disclosure (2969258)
The version of Microsoft Lync Server installed on the remote host is affected by an information disclosure vulnerability that can be exploited by tricking a user into clicking a specially crafted URL. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid74424;...
Microsoft Lync Server Information Disclosure (MS14-032; CVE-2014-1823)
An information disclosure vulnerability exists when Lync Server fails to properly sanitize specially crafted content. The vulnerability is caused when Lync Server does not properly sanitize specially crafted content. An attacker who successfully exploited this vulnerability could potentially...
Microsoft Lync Server CVE-2014-1823 Information Disclosure Vulnerability
Description Microsoft Lync Server is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Lync Server 2010 Microsoft Lync Server 2013 Recommendations Run all software as ...
Microsoft Lync Server 2010 reachLocale Parameter XSS
According to its self-reported version number, the version of Web Components Server a component of Microsoft Lync 2010 has a cross-site scripting vulnerability. Input passed to the 'reachLocale' parameter of ReachJoin.aspx is not properly sanitized. An attacker could exploit this by tricking a us...
Microsoft Lync Server Remote Code Execution Vulnerability (2834695)
This host is missing an important security update according to Microsoft Bulletin MS13-041. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Lync Server Version Detection
Detects the installed version of Microsoft Lync Server. The script logs in via smb, searches for Microsoft Lync Server in the registry and gets the version from Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Microsoft Lync Server 2010 - ReachJoin.aspx Remote Command Injection
Microsoft Lync Server 2010 - ReachJoin.aspx Remote Command Injection source: https://www.securityfocus.com/bid/48235/info Microsoft Lync Server 2010 is prone to a remote command-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers can exploit this issue to...
Microsoft Lync Server 2010 - 'ReachJoin.aspx' Remote Command Injection
source: https://www.securityfocus.com/bid/48235/info Microsoft Lync Server 2010 is prone to a remote command-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary commands in the context of the application. Microso...
Security update 1970-01-01
...
Security update 1970-01-01
...
Microsoft Teams help & learning
None None...
Security update 1970-01-01
...
Security Update for Lync Server 2010 Web Components Server (KB2963286)
A security issue has been identified in a Microsoft Lync software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base...
Detectoid for Lync Server 2013 Backup Service
Detectoid for Lync Server 2013 Backup Service...
Security Update for Lync Server 2010 Response Group Service (KB2982388)
A security issue has been identified in a Microsoft Lync software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base...