Unrated severityNVD Advisory· Published Sep 9, 2015· Updated May 6, 2026
CVE-2015-2531
CVE-2015-2531
Description
Cross-site scripting (XSS) vulnerability in the jQuery engine in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Skype for Business Server and Lync Server XSS Information Disclosure Vulnerability."
Affected products
2- cpe:2.3:a:microsoft:lync_server:2013:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:skype_for_business_server:2015:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.