CVE-2023-41763

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-41763
Skype for Business Elevation of Privilege Vulnerability

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-41763 Patch Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-41763 Patch Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41763 US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:skype_for_business_server:2015:cumulative_update_13:*:*:*:*:*:*
cpe:2.3:a:microsoft:skype_for_business_server:2019:cumulative_update_7:*:*:*:*:*:*
History

28 Oct 2025, 14:10

Type Values Removed Values Added
References () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41763 - () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41763 - US Government Resource

21 Oct 2025, 23:16

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41763 -

21 Oct 2025, 20:19

Type Values Removed Values Added
References
  • {'url': 'https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41763', 'source': '134c704f-9b21-4f2e-91b3-4a467353bcc0'}

21 Oct 2025, 19:20

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41763 -

21 Nov 2024, 08:21

Type Values Removed Values Added
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-41763 - Patch, Vendor Advisory () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-41763 - Patch, Vendor Advisory

14 Aug 2024, 19:56

Type Values Removed Values Added
CWE NVD-CWE-noinfo

29 May 2024, 02:16

Type Values Removed Values Added
CWE CWE-918

12 Oct 2023, 22:18

Type Values Removed Values Added
CPE cpe:2.3:a:microsoft:skype_for_business_server:2015:cumulative_update_13:*:*:*:*:*:*
cpe:2.3:a:microsoft:skype_for_business_server:2019:cumulative_update_7:*:*:*:*:*:*
References (MISC) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-41763 - (MISC) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-41763 - Patch, Vendor Advisory
First Time Microsoft
Microsoft skype For Business Server
CWE NVD-CWE-noinfo

10 Oct 2023, 18:20

Type Values Removed Values Added
New CVE
Information

Published : 2023-10-10 18:15

Updated : 2025-10-28 14:10

NVD link : CVE-2023-41763

Mitre link : CVE-2023-41763

CVE.ORG link : CVE-2023-41763

JSON object : View

Products Affected

microsoft

  • skype_for_business_server
CWE
CWE-918

Server-Side Request Forgery (SSRF)