Vulnerabilities > Microsoft > Skype FOR Business > 2019

DATE CVE VULNERABILITY TITLE RISK
2020-07-14 CVE-2020-1025 Improper Input Validation vulnerability in Microsoft products
An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation.
network
low complexity
microsoft CWE-20
critical
 9.8
9.8
2019-12-10 CVE-2019-1490 Injection vulnerability in Microsoft Skype for Business 2019
A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business Server Spoofing Vulnerability'.
network
low complexity
microsoft CWE-74
5.4
5.4