Login Request a demo
LS
Product
Lync Server
by Microsoft · last CVE Jul 12, 2022
16
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 0High 2Medium 6Low 0
Severity
All severities16Critical0High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Lync Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-33633
7.2
2%
Jul 12
Skype for Business and Lync Remote Code Execution Vulnerability
Affected: 2013
CVE-2021-26422
7.2
2%
May 11
Skype for Business and Lync Remote Code Execution Vulnerability
Affected: 2013
CVE-2022-26911
6.5
4%
Apr 15
Skype for Business Information Disclosure Vulnerability
Affected: 2013
CVE-2021-26421
6.5
1%
May 11
Skype for Business and Lync Spoofing Vulnerability
Affected: 2013
CVE-2021-24099
6.5
3%
Feb 25
Skype for Business and Lync Denial of Service Vulnerability
Affected: 2013
CVE-2021-24073
6.5
2%
Feb 25
Skype for Business and Lync Spoofing Vulnerability
Affected: 2013
CVE-2019-0798
6.1
2%
Apr 9
A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business and Lync Spoofing…
Affected: 2013
CVE-2019-1029
5.9
5%
Jun 12
A denial of service vulnerability exists in Skype for Business
Affected: 2010; 2013
CVE-2015-2536
–
9%
Sep 9
Cross-site scripting (XSS) vulnerability in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a…
Affected: 2013
CVE-2015-2532
–
11%
Sep 9
Cross-site scripting (XSS) vulnerability in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Lync Server XSS…
Affected: 2013
CVE-2015-2531
–
11%
Sep 9
Cross-site scripting (XSS) vulnerability in the jQuery engine in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web…
Affected: 2013
CVE-2014-4071
–
19%
Sep 10
The Server in Microsoft Lync Server 2013 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon hang) via a crafted request, aka "Lync Denial of…
Affected: 2013
CVE-2014-4070
–
11%
Sep 10
Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted…
Affected: 2013
CVE-2014-4068
–
20%
Sep 10
The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptions, which allows remote attackers to…
Affected: 2010; 2013
CVE-2014-1823
–
51%
Jun 11
Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inject arbitrary web script or HTML via a…
Affected: 2010; 2013
CVE-2013-1302
–
22%
May 15
Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary…
Affected: 2013
Showing 16