Microsoft Skype for Business Server 2019 CU2

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2021-240997.0.0 – < publicationSkype for Business and Lync Denial of Service VulnerabilityMEDIUM 6.53.2 %
CVE-2020-10257.0.0 – < publicationMicrosoft Office Elevation of Privilege VulnerabilityCRITICAL 9.85.9 %
CVE-2019-1490unspecifiedA spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for BusiMEDIUM 5.41.5 %