Azure Stack Hub CVEs and Security Vulnerabilities

CVE-2021-38649

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS 2.9% KEV · Listed

Vendors

Microsoft

Products

Azure Automation State Configuration Azure Automation Update Management Azure Diagnostics and 9 more

CVE-2021-38648

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 11.4% KEV · Listed

Vendors

Microsoft

Products

Azure Automation State Configuration Azure Automation Update Management Azure Diagnostics and 9 more

CVE-2021-38647

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CVSS 3.1 · 9.8 Critical EPSS 99.9% KEV · Listed

Vendors

Microsoft

Products

Azure Automation State Configuration Azure Automation Update Management Azure Diagnostics and 8 more

CVE-2021-38645

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.7% KEV · Listed

Vendors

Microsoft

Products

Azure Automation State Configuration Azure Automation Update Management Azure Diagnostics and 8 more

CVE-2025-53793

Azure Stack Hub Information Disclosure Vulnerability

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed

Vendors

Microsoft

Products

Azure Stack Hub Azure Stack Hub 2406 Azure Stack Hub 2408 and 1 more

CVE-2025-53765

Azure Stack Hub Information Disclosure Vulnerability

Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure App Service On Azure Stack Azure Stack Hub

CVE-2024-38201

Azure Stack Hub Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Stack Hub

CVE-2024-38108

Azure Stack Hub Spoofing Vulnerability

CVSS 3.1 · 9.3 Critical EPSS 1.2% KEV · Not listed

Vendors

Microsoft

Products

Azure Stack Hub

CVE-2024-20679

Azure Stack Hub Spoofing Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Microsoft

Products

Azure Stack Hub

CVE-2022-29149

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Automation State Configuration Azure Automation Update Management Azure Diagnostics and 7 more

CVE-2023-21777

Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

CVSS 3.1 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure App Service On Azure Stack Azure Stack Hub

CVE-2024-38220

Azure Stack Hub Elevation of Privilege Vulnerability

CVSS 3.1 · 9 Critical EPSS 1.0% KEV · Not listed

Vendors

Microsoft

Products

Azure Stack Hub

CVE-2024-38216

Azure Stack Hub Elevation of Privilege Vulnerability

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Stack Hub

Search vulnerabilities

Open Management Infrastructure Elevation of Privilege Vulnerability

Open Management Infrastructure Elevation of Privilege Vulnerability

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Open Management Infrastructure Elevation of Privilege Vulnerability

Azure Stack Hub Information Disclosure Vulnerability

Azure Stack Hub Information Disclosure Vulnerability

Azure Stack Hub Elevation of Privilege Vulnerability

Azure Stack Hub Spoofing Vulnerability

Azure Stack Hub Spoofing Vulnerability

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

Azure Stack Hub Elevation of Privilege Vulnerability

Azure Stack Hub Elevation of Privilege Vulnerability