CVE-2024-20695

External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.

Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.

A cross-site scripting (XSS) vulnerability in Skype for Business allows an unauthorized attacker to perform spoofing over a network.

An out-of-bounds read vulnerability in Skype for Business allows an authorized attacker to deny service over a network.

Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.

A vulnerability in Skype for Business that generates error messages containing sensitive information allows an unauthorized attacker to disclose information over a network.

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.

Server-side request forgery (SSRF) in Skype for Business allows an unauthorized attacker to disclose information over a network.