Lucene search
MicrosoftCVE-2015-6061HistoryNov 11, 2015 - 11:59 a.m.
CVE-2015-6061
2015-11-1111:59:33
CWE-79
microsoft
web.nvd.nist.gov
47
3
cve-2015-6061
cross-site scripting
xss
microsoft
skype for business
lync
vulnerability
web security
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.044
Percentile
92.6%
Cross-site scripting (XSS) vulnerability in Microsoft Skype for Business 2016, Lync 2010 and 2013 SP1, Lync 2010 Attendee, and Lync Room System allows remote attackers to inject arbitrary web script or HTML via an instant-message session, aka “Server Input Validation Information Disclosure Vulnerability.”
Affected configurations
Node
microsoftlyncMatch2010x64
ORmicrosoftlyncMatch2010x86
ORmicrosoftlyncMatch2010attendee
ORmicrosoftlyncMatch2013sp1x64
ORmicrosoftlyncMatch2013sp1x86
ORmicrosoftlync_room_systemMatch-
ORmicrosoftskype_for_businessMatch2016
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | lync | 2010 | cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:x64:* |
| microsoft | lync | 2010 | cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:x86:* |
| microsoft | lync | 2010 | cpe:2.3:a:microsoft:lync:2010:*:*:*:attendee:*:*:* |
| microsoft | lync | 2013 | cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:x64:* |
| microsoft | lync | 2013 | cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:x86:* |
| microsoft | lync_room_system | - | cpe:2.3:a:microsoft:lync_room_system:-:*:*:*:*:*:*:* |
| microsoft | skype_for_business | 2016 | cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:* |
References
Social References
More
Related
kaspersky
kaspersky
openvas
openvas
Microsoft Lync Attendee Information Disclosure Vulnerability (3105872)
2015-11-11 00:00:00
Microsoft Lync Information Disclosure Vulnerability (3105872)
2015-11-11 00:00:00
mskb
mskb
nessus
nessus
cvelist
cvelist
CVE-2015-6061
2015-11-11 11:00:00
prion
prion
Information disclosure
2015-11-11 11:59:00
checkpoint_advisories
checkpoint_advisories
symantec
symantec
nvd
nvd
CVE-2015-6061
2015-11-11 11:59:33
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.044
Percentile
92.6%
Related for CVE-2015-6061