CVE-2014-4070 Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Lync XSS Info...
MediumCVSS 4.3
EPSS 10.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Lync XSS Information Disclosure Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft lync server | = 2013 | No fix listed |
References
- 69579 vdb-entry
- 1030821 vdb-entry
- MS14-055 vendor-advisory
- ms-lync-cve20144070-info-disc(95546) vdb-entry