Description of Security Update 4 for Microsoft Skype for Business Server 2015 CU13: October 13, 2026 (KB5132779)

Description of Security Update 4 for Microsoft Skype for Business Server 2015 CU13: October 13, 2026 KB5132779 Applies To Skype for Business Server 2015 Summary This cumulative update resolves vulnerabilities in Microsoft Skype for Business Server 2015. To learn more about these vulnerabilities,...

Description of Security Update 4 for Microsoft Skype for Business Server 2019 CU8: October 13, 2026 (KB5131693)

Description of Security Update 4 for Microsoft Skype for Business Server 2019 CU8: October 13, 2026 KB5131693 Applies To Skype for Business Server 2019 Summary This security update resolves vulnerabilities in Microsoft Skype for Business Server 2019. To learn more about these vulnerabilities, see...

Description of Security Update 2 for Microsoft Skype for Business Server SE CU1: October 13, 2026 (KB5131692)

Description of Security Update 2 for Microsoft Skype for Business Server SE CU1: October 13, 2026 KB5131692 Summary This cumulative update resolves vulnerabilities in Microsoft Skype for Business Server Subscription Edition. To learn more about these vulnerabilities, see the following security...

Skype for Business Instant Messaging Spoofing

The vulnerability of the Skype for Business Server’s instant messaging program is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to carry out spoofing attacks remotely...

Skype for Business Instant Messaging DoS

The vulnerability of the Skype for Business Server’s instant messaging program is related to a countable loss of significance. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Skype for Business Server Disclosure

The vulnerability of the Skype for Business Server’s instant messaging program is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Skype for Business Instant Messaging Spoofing

The vulnerability of the Skype for Business Server’s instant messaging program relates to the possibility of using client-side authentication. Exploiting this vulnerability could allow attackers to carry out spoofing attacks remotely...

Skype for Business Server Code Execution

The vulnerability of the Skype for Business Server’s instant messaging program is related to improper external management of the file name or path. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Description of Security Update 3 for Microsoft Skype for Business Server 2015 CU13: September 8, 2026 (KB5123301)

Description of Security Update 3 for Microsoft Skype for Business Server 2015 CU13: September 8, 2026 KB5123301 Applies To Skype for Business Server 2015 Summary This cumulative update resolves vulnerabilities in Microsoft Skype for Business Server 2015. To learn more about these vulnerabilities,...

Description of Security Update 3 for Microsoft Skype for Business Server 2019 CU8: September 8, 2026 (KB5123300)

Description of Security Update 3 for Microsoft Skype for Business Server 2019 CU8: September 8, 2026 KB5123300 Applies To Skype for Business Server 2019 Summary This security update resolves vulnerabilities in Microsoft Skype for Business Server 2019. To learn more about these vulnerabilities, se...

Description of Security Update 1 for Microsoft Skype for Business Server SE CU1: September 8, 2026 (KB5123287)

Description of Security Update 1 for Microsoft Skype for Business Server SE CU1: September 8, 2026 KB5123287 Summary This cumulative update resolves vulnerabilities in Microsoft Skype for Business Server Subscription Edition. To learn more about these vulnerabilities, see the following security...

CVE-2026-44760

Due to a Cross-Site Scripting XSS vulnerability, applications based on Business Server Pages framework in SAP NetWeaver Application Server ABAP reflects unsanitized input into the HTTP response which allows an attacker to inject and execute arbitrary JavaScript code under certain conditions...

CVE-2026-44760 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on Business Server Pages)

Due to a Cross-Site Scripting XSS vulnerability, applications based on Business Server Pages framework in SAP NetWeaver Application Server ABAP reflects unsanitized input into the HTTP response which allows an attacker to inject and execute arbitrary JavaScript code under certain conditions...

CVE-2026-44760

The CVE-2026-44760 entry concerns a Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP-based applications that use the Business Server Pages framework. The vulnerability arises from unsanitized input being reflected in the HTTP response, enabling an attacker to inject and execute...

CVE-2026-44760 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on Business Server Pages)

Due to a Cross-Site Scripting XSS vulnerability, applications based on Business Server Pages framework in SAP NetWeaver Application Server ABAP reflects unsanitized input into the HTTP response which allows an attacker to inject and execute arbitrary JavaScript code under certain conditions...

PT-2026-57941

Due to a Cross-Site Scripting XSS vulnerability, applications based on Business Server Pages framework in SAP NetWeaver Application Server ABAP reflects unsanitized input into the HTTP response which allows an attacker to inject and execute arbitrary JavaScript code under certain conditions...

CVE-2026-44760: Improper Neutralization of Input During Web Page Generation

Due to a Cross-Site Scripting XSS vulnerability, applications based on Business Server Pages framework in SAP NetWeaver Application Server ABAP reflects unsanitized input into the HTTP response which allows an attacker to inject and execute arbitrary JavaScript code under certain conditions...

CVE-2026-40132

Due to missing authorization check in SAP Strategic Enterprise Management Scorecard Wizard in Business Server Pages, an authenticated attacker could access information that they are otherwise unauthorized to view. This vulnerability also enables the attacker to change the default settings and...

CVE-2026-40137

SAP TAFAPPLAUNCHER within Business Server Pages allows an unauthenticated attacker to craft malicious links that, when clicked by a victim, redirects them to attacker?controlled sites, potentially exposing or altering sensitive information in the victim�s browser. This results in a low impact on...

CVE-2026-40137

SAP CVE-2026-40137 affects the SAP TAF_APPLAUNCHER component of Business Server Pages. It describes a Cross-Site Scripting (XSS) issue where an unauthenticated attacker can craft malicious links that, when a victim clicks, redirect to attacker‑controlled sites and potentially expose or alter info...