CVE:CVE-2021-26422
CNNVD:CNNVD-202105-619
Microsoft Skype for Business Server是美国微软（Microsoft）公司的一套安全统一的通信平台，它提供即时消息 (IM)、音频和视频通话、联机会议、联机状态信息和共享功能。
Skype for Business and Microsoft Lync存在命令注入漏洞。以下产品和版本受到影响：Microsoft Lync Server 2013 CU10,Skype for Business Server 2019 CU5,Skype for Business Server 2015 CU11,
solution:Upgrade microsoft lync_server to a higher version than 2013:cumulative_update_10,and avoid the version 2013:cumulative_update_10; Upgrade microsoft skype_for_business_server to a higher version than 2015:cumulative_update_11,2019:cumulative_update_5,and avoid the version 2015:cumulative_update_11,2019:cumulative_update_5