Multiple vulnerabilities in Microsoft communication services

Описание

Improper content sanitization at jQuery engine and other vectors were found in Lync Server and Skype for Business Server. By exploiting these vulnerabilities malicious users can gain privileges or obtain sensitive information. These vulnerabilities can be exploited remotely via a specially designed web content. Clients connected to affected servers are also affected.

Первичный источник обнаружения

• CVE-2015-2536
  CVE-2015-2531
  CVE-2015-2532
  

Связанные продукты

• Microsoft-Lync-Server

Список CVE

• CVE-2015-2536
  warning
• CVE-2015-2531
  warning
• CVE-2015-2532
  warning

Список KB

• 3089952
• 3080353
• 3061064

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com