A vulnerability was found in Microsoft Lync Server and Skype for Business Server. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting.
This vulnerability is known as CVE-2015-2536. The attack can be launched remotely. There is no exploit available.
It is recommended to apply a patch to fix this issue.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2015-2536 | Microsoft Lync Server/Skype for Business Server cross site scripting (MS15-104 / MS15-104)
A vulnerability was found in Microsoft Lync Server and Skype for Business Server. It has been declared as problematic. Affected by this vulnerability is an…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
Offizielles Hersteller-Update verfügbar
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller hat ein verifiziertes Patch-Release herausgegeben. Sofortiges Rollout auf Test- und Produktivsystemen empfohlen.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Microsoft MSRC Advisory Verifiziertmicrosoft.com
-
Web Referencewww.securitytracker.com