NVD

Id
27082  
Name
CVE-2015-6061  
Description
Cross-site scripting (XSS) vulnerability in Microsoft Skype for Business 2016, Lync 2010 and 2013 SP1, Lync 2010 Attendee, and Lync Room System allows remote attackers to inject arbitrary web script or HTML via an instant-message session, aka "Server Input Validation Information Disclosure Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-11-11  
Modified Date
2016-12-07  
Seq
2015-6061  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
143232 27082 CVE-2015-6061 MS15-123  View
143233 27082 CVE-2015-6061 1034126  View
143234 27082 CVE-2015-6061 1034127  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10554 JVNDB-2015-005874 Microsoft Lync および Skype for Business におけるクロスサイトスクリプティングの脆弱性 Microsoft Lync および Skype for Business には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-6061 83286 CVE-2015-6061 27082 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005874.html 2015-11-10 2015-11-13 View