CVEvulnerability

CVE-2015-6061

4.3 MEDIUM Published 2015-11-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-11-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in Microsoft Skype for Business 2016, Lync 2010 and 2013 SP1, Lync 2010 Attendee, and Lync Room System allows remote attackers to inject arbitrary web script or HTML via an instant-message session, aka "Server Input Validation Information Disclosure Vulnerability."

Affected configurations

• microsoft lync 2010 • microsoft lync 2013 • microsoft lync room system • microsoft skype for business 2016

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References