CVE

Id
69118  
CVE No.
CVE-2014-1823  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing a valid meeting ID, aka "Lync Server Content Sanitization Vulnerability."  
Phase
Assigned (20140129)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
664337 69118 CVE-2014-1823 CONFIRM:http://blogs.technet.com/b/srd/archive/2014/06/10/assessing-risk-for-the-june-2014-security-updates.aspx  View
664338 69118 CVE-2014-1823 MS:MS14-032  View
664339 69118 CVE-2014-1823 URL:http://technet.microsoft.com/security/bulletin/MS14-032  View
664340 69118 CVE-2014-1823 BID:67893  View
664341 69118 CVE-2014-1823 URL:http://www.securityfocus.com/bid/67893  View
664342 69118 CVE-2014-1823 SECTRACK:1030381  View
664343 69118 CVE-2014-1823 URL:http://www.securitytracker.com/id/1030381  View
664344 69118 CVE-2014-1823 SECUNIA:58537  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19052 JVNDB-2014-007927 Phusion Passenger における特定のファイルおよびディレクトリに書き込まれる脆弱性 Phusion Passenger には、特定のファイルおよびディレクトリに書き込まれる脆弱性が存在します。 CVE-2014-1831 69118 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007927.html  View