CVE-2020-17002

Azure SDK for C Security Feature Bypass Vulnerability

Azure SDK for C Security Feature Bypass Vulnerability

CVSS 3.1 · 7.4 High EPSS 3.5% KEV · Not listed

Vendors

Microsoft

Products

Azure C Shared Utility Azure Uamqp C Azure Uhttp C and 3 more

CVE-2020-16971

Azure SDK for Java Security Feature Bypass Vulnerability

Azure SDK for Java Security Feature Bypass Vulnerability

CVSS 3.1 · 7.4 High EPSS 4.3% KEV · Not listed

Vendors

Microsoft

Products

Azure Core Amqp Azure Sdk For Java

CVE-2022-44699

Azure Network Watcher Agent Security Feature Bypass Vulnerability

Azure Network Watcher Agent Security Feature Bypass Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Network Watcher Agent

CVE-2024-38175

Azure Managed Instance for Apache Cassandra Elevation of Privilege Vulnerability

An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network.

CVSS 3.1 · 9.6 Critical EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Managed Instance For Apache Cassandra

CVE-2024-38109

Azure Health Bot Elevation of Privilege Vulnerability

An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.

CVSS 3.1 · 9.1 Critical EPSS 1.8% KEV · Not listed

Vendors

Microsoft

Products

Azure Health Bot

CVE-2024-38195

Azure CycleCloud Remote Code Execution Vulnerability

Azure CycleCloud Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Cyclecloud

CVE-2024-38162

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Azure Connected Machine Agent Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Connected Machine Agent

CVE-2024-38158

Azure IoT SDK Remote Code Execution Vulnerability

Azure IoT SDK Remote Code Execution Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Iot Hub Device Client Sdk

CVE-2024-38157

Azure IoT SDK Remote Code Execution Vulnerability

Azure IoT SDK Remote Code Execution Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Iot Hub Device Client Sdk

CVE-2024-38098

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Azure Connected Machine Agent Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Connected Machine Agent

CVE-2024-38201

Azure Stack Hub Elevation of Privilege Vulnerability

Azure Stack Hub Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Stack Hub

CVE-2024-38108

Azure Stack Hub Spoofing Vulnerability

Azure Stack Hub Spoofing Vulnerability

CVSS 3.1 · 9.3 Critical EPSS 1.2% KEV · Not listed

Vendors

Microsoft

Products

Azure Stack Hub

CVE-2024-49060

Azure Stack HCI Elevation of Privilege Vulnerability

Azure Stack HCI Elevation of Privilege Vulnerability

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Stack Hci

CVE-2024-43613

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

CVSS 3.1 · 7.2 High EPSS 1.2% KEV · Not listed

Vendors

Microsoft

Products

Azure Database For Postgresql Flexible Server

CVE-2024-49052

Microsoft Azure PolicyWatch Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Functions

CVE-2024-49042

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

CVSS 3.1 · 7.2 High EPSS 1.2% KEV · Not listed

Vendors

Microsoft

Products

Azure Database For Postgresql Flexible Server

CVE-2024-43602

Azure CycleCloud Remote Code Execution Vulnerability

Azure CycleCloud Remote Code Execution Vulnerability

CVSS 3.1 · 9.9 Critical EPSS 2.3% KEV · Not listed

Vendors

Microsoft

Products

Azure Cyclecloud

CVE-2024-43591

Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

CVSS 3.1 · 8.7 High EPSS 1.6% KEV · Not listed

Vendors

Microsoft

Products

Azure Command-line Interface Azure Service Connector

CVE-2024-38097

Azure Monitor Agent Elevation of Privilege Vulnerability

Azure Monitor Agent Elevation of Privilege Vulnerability

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Monitor Agent

CVE-2022-35798

Azure Arc Jumpstart Information Disclosure Vulnerability

Azure Arc Jumpstart Information Disclosure Vulnerability

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Arc Jumpstart