Description of the security update for Skype for Business Lync Server 2013: April 12, 2022 (KB5012681)

Description of the security update for Skype for Business Lync Server 2013: April 12, 2022 KB5012681 Summary This security update resolves an information disclosure vulnerability in Microsoft Lync Server. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposure...

CVE-2016-4377: Undefined Security Weakness

HPE Smart Update in Storage Sizing Tool before 13.0, Converged Infrastructure Solution Sizer Suite CISSS before 2.13.1, Power Advisor before 7.8.2, Insight Management Sizer before 16.12.1, Synergy Planning Tool before 3.3, SAP Sizing Tool before 16.12.1, Sizing Tool for SAP Business Suite powered...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Lync Server XSS Information Disclosure Vulnerability."...

PT-2015-2003

Name of the Vulnerable Software and Affected Versions Microsoft Lync Server 2013 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This is due to the lack of protection measures for t...

PT-2015-2004

Name of the Vulnerable Software and Affected Versions Microsoft Lync Server 2013 Skype for Business Server 2015 Description The issue exists due to insufficient protection of the web page structure in the jQuery component of Microsoft Lync Server and Skype for Business Server. This allows a remot...

CVE-2015-2532: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Lync Server XSS Information Disclosure Vulnerability."...

CVE-2015-2536: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Skype for Business Server and Lync Server XSS Elevation of Privilege Vulnerability."...

CVE-2015-2531: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the jQuery engine in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Skype for Business Server and Lync Server XSS Information Disclosure Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Lync XSS Information Disclosure Vulnerability."...

CVE-2014-4070

CVE-2014-4070 is an XSS vulnerability affecting Microsoft Lync Server 2013 (Web Components Server). The issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL, stemming from insufficient input sanitization. Multiple connected sources corroborate this, listing Lync ...

CVE-2014-4070: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Lync XSS Information Disclosure Vulnerability."...

CVE-2014-4071: Undefined Security Weakness

The Server in Microsoft Lync Server 2013 allows remote attackers to cause a denial of service NULL pointer dereference and daemon hang via a crafted request, aka "Lync Denial of Service Vulnerability."...

PT-2014-1674

Name of the Vulnerable Software and Affected Versions Microsoft Lync Server 2013 Description The issue allows an attacker to cause a denial of service, resulting in a system crash. This can be achieved through a crafted request, which leads to a NULL pointer dereference and daemon hang...

PT-2014-1676

Name of the Vulnerable Software and Affected Versions Microsoft Lync Server 2013 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. This is related to incorrect handling of specially crafted content, which can...

CVE-2014-1823

CVE-2014-1823 is an XSS vulnerability affecting Microsoft Lync Server 2010 and 2013, specifically in the Web Components Server. A crafted URL containing a valid meeting ID can be used to inject arbitrary web script or HTML remotely. Multiple connected advisories corroborate the issue as an inform...