CVE-2023-41763 | BDVDB-2026-213746 Detail

MicrosoftSkype for Business Server 2015 CU13

Description#

Skype for Business Elevation of Privilege Vulnerability

Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: network.

No public exploit known

5.3 Medium

90.2%, Very High

Estimated chance of exploitation in the next 30 days. EPSS percentile: 99.8.

Yes

Listed in the CISA Known Exploited Vulnerabilities catalog.

Server-Side Request Forgery

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Not available

5.3 Medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

Not available

Not available

Source: CVE List v5 (record); CISA KEV (kev, action); FIRST EPSS (epss).