GCVE - cpe:2.3:a:microsoft:skype_for_business

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:skype_for_business_server:2019:cu2:*:*:*:*:*:*

part: a version: 2019 update: cu2

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Skype For Business Server (`38f311a5-49a0-5383-ae50-7d5de0bae677`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-24099`	vulnerable	2026-06-08 05:30:03.723307	Skype for Business and Lync Denial of Service Vulnerability MEDIUM (6.5) Skype for Business and Lync Denial of Service Vulnerability Published: 2021-02-25T23:01:51.000Z Updated: 2024-08-03T19:21:18.288Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24099	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-1025`	vulnerable	2026-06-08 05:20:57.731249	Microsoft Office Elevation of Privilege Vulnerability An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve improper access. To exploit this vulnerability, an attacker would need to modify the token. The update addresses the vulnerability by modifying how Microsoft SharePoint Server and Skype for Business Server validate tokens. Published: 2020-07-14T22:53:56.000Z Updated: 2024-08-04T06:24:59.514Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1025	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.