Lucene search

K
cvelistMicrosoftCVELIST:CVE-2014-4070
HistorySep 10, 2014 - 1:00 a.m.

CVE-2014-4070

2014-09-1001:00:00
microsoft
www.cve.org

4.8 Medium

AI Score

Confidence

High

0.027 Low

EPSS

Percentile

90.5%

Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka “Lync XSS Information Disclosure Vulnerability.”

4.8 Medium

AI Score

Confidence

High

0.027 Low

EPSS

Percentile

90.5%