CVE-2014-4070 in Microsoft Lync
Resumen (Inglés)
Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Lync XSS Information Disclosure Vulnerability."
Reservar
2014-06-12
Divulgación
2014-09-09
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 67517 | Microsoft Lync Script Reflected secuencias de comandos en sitios cruzados | 79 | No probado | Arreglo oficial | CVE-2014-4070 |