CVE-2023-41763 MEDIUM

CVE-2023-41763: Skype for Business Elevation of Privilege Vulnerability

Vendor Microsoft
Product Skype for Business Server 2015 CU13
Weakness CWE-918 · SSRF
KEV Status Known Exploited
Published October 10, 2023
Last update October 21, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

What the vulnerability does

01Description

Skype for Business Elevation of Privilege Vulnerability

CISA mandated remediation

02CISA Required Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Key dates

03Disclosure timeline

October 10, 2023 CVE published
October 21, 2025 Record updated

Related vulnerabilities

05Related CVE

CVE-2026-28416 Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing CVE-2026-3966 648540858 wvp-GB28181-pro IP Address ABLMediaNodeServerService.java getDownloadFilePath server-side request forgery CVE-2024-12882 SSRF in comfyanonymous/comfyui CVE-2026-1648 Performance Monitor <= 1.0.6 - Unauthenticated Server-Side Request Forgery via 'url' Parameter CVE-2025-64327 ThinkDashboard: Blind Server-Side Request Forgery (SSRF) vulnerability in /api/ping Endpoint