Vulnerabilities > CVE-2023-41763 - Server-Side Request Forgery (SSRF) vulnerability in Microsoft Skype for Business Server 2015/2019

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

NVD

Published: 2023-10-10

Updated: 2024-08-14

Summary

Skype for Business Elevation of Privilege Vulnerability

Vulnerable Configurations

Part	Description	Count
Application	Microsoft Microsoft Skype FOR Business Server 2015 Microsoft Skype FOR Business Server 2019	2

Common Weakness Enumeration (CWE)

CWE-918 - Server-Side Request Forgery (SSRF)

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-41763

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.