Known vulnerabilities in Skype for Business Server

Vendor: Microsoft
Software: Skype for Business Server
Software CPE: cpe:2.3:a:microsoft:skype_for_business_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 28
Public exploits: 0
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Skype for Business Server Skype for Business Server is affected by 28 known vulnerabilities: 2 high, 13 medium, 13 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148423 - Improper Verification of Cryptographic Signature
CVE-2026-69646		 CWE-347 Medium
No
No
 6.0.9319.885, 7.0.2046.569 09.09.2026 SB2026090938
#VU148422 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-69642		 CWE-79 Low
No
No
 6.0.9319.885, 7.0.2046.569 09.09.2026 SB2026090938
#VU148395 - Information Exposure Through an Error Message
CVE-2026-66306		 CWE-209 Medium
No
No
 6.0.9319.885, 7.0.2046.569 09.09.2026 SB2026090938
#VU148360 - Use of Client-Side Authentication
CVE-2026-66305		 CWE-603 Medium
No
No
 6.0.9319.885, 7.0.2046.569 09.09.2026 SB2026090938
#VU148359 - Server-Side Request Forgery (SSRF)
CVE-2026-66304		 CWE-918 Medium
No
No
 6.0.9319.885, 7.0.2046.569 09.09.2026 SB2026090938
#VU148358 - External Control of File Name or Path
CVE-2026-66302		 CWE-73 High
No
No
 6.0.9319.885, 7.0.2046.569 09.09.2026 SB2026090938
#VU148357 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63523		 CWE-79 Low
No
No
 6.0.9319.885, 7.0.2046.569 09.09.2026 SB2026090938
#VU148356 - Out-of-bounds read
CVE-2026-66308		 CWE-125 Medium
No
No
 6.0.9319.885, 7.0.2046.569 09.09.2026 SB2026090907
#VU148355 - Integer underflow
CVE-2026-66307		 CWE-191 Medium
No
No
 6.0.9319.885, 7.0.2046.569 09.09.2026 SB2026090907
#VU148354 - NULL Pointer Dereference
CVE-2026-66303		 CWE-476 Medium
No
No
 6.0.9319.885, 7.0.2046.569 09.09.2026 SB2026090907
#VU86440 - Exposure of sensitive information to an unauthorized actor
CVE-2024-20695		 CWE-200 Low
No
No
 - 13.02.2024 SB2024021362
#VU81806 - Improper input validation
CVE-2023-36780		 CWE-20 Low
No
No
 6.0.9319.869, 7.0.246.530 10.10.2023 SB2023101085
#VU81805 - Improper input validation
CVE-2023-36789		 CWE-20 Low
No
No
 6.0.9319.869, 7.0.246.530 10.10.2023 SB2023101085
#VU81804 - Improper input validation
CVE-2023-36786		 CWE-20 Low
No
No
 6.0.9319.869, 7.0.246.530 10.10.2023 SB2023101085
#VU81729 - Exposure of sensitive information to an unauthorized actor
CVE-2023-41763		 CWE-200 High
No
Exploited
 6.0.9319.869, 7.0.246.530 10.10.2023 SB2023101033
#VU65212 - Improper input validation
CVE-2022-33633		 CWE-20 Low
No
No
 - 12.07.2022 SB2022071257
#VU62279 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-26910		 CWE-451 Medium
No
No
 - 13.04.2022 SB2022041311
#VU62256 - Exposure of sensitive information to an unauthorized actor
CVE-2022-26911		 CWE-200 Medium
No
No
 - 12.04.2022 SB2022041260
#VU53103 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-26421		 CWE-451 Medium
No
No
 - 11.05.2021 SB2021051122
#VU53102 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-26422		 CWE-94 Low
No
No
 - 11.05.2021 SB2021051122


Showing elements 1 - 20 out of 28