CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2026-63523

Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 50.1%

CVSS Severity

CVSS v3 Score 6.5

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63523

Products affected by CVE-2026-63523

Microsoft » Skype For Business Server » Version: 2015

cpe:2.3:a:microsoft:skype_for_business_server:2015
Microsoft » Skype For Business Server » Version: 2019

cpe:2.3:a:microsoft:skype_for_business_server:2019

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-63523

Products

Pricing

Contact Us