Skip to contentMicrosoft Azure vulnerabilities
- microsoft azure cyclecloud, azure cyclecloud 7.9.10, azure cyclecloud 8.2.0 +2 moreAzure CycleCloud Elevation of Privilege VulnerabilityCVE-2021-337627.0 High
- microsoft azure sphereAzure Sphere Denial of Service VulnerabilityCVE-2021-264306.0 Medium
- microsoft azure sphereAzure Sphere Elevation of Privilege VulnerabilityCVE-2021-264297.7 High
- microsoft azure sphereAzure Sphere Information Disclosure VulnerabilityCVE-2021-264284.4 Medium
- microsoft azure sphereAzure Sphere Unsigned Code Execution VulnerabilityCVE-2021-284608.1 High
- microsoft azure devops server, azure devops server 2020.0.1 +1 moreAzure DevOps Server Spoofing VulnerabilityCVE-2021-284596.1 Medium
- microsoft ms-rest-nodeauth, @azure/ms-rest-nodeauth +1 moreAzure ms-rest-nodeauth Library Elevation of Privilege VulnerabilityCVE-2021-28458Fix available7.8 High
- microsoft azure devops server, team foundation server, azure devops server 2019 update 1 +7 more +9 moreAzure DevOps Server and Team Foundation Server Information Disclosure VulnerabilityCVE-2021-270676.5 Medium
- microsoft azure container instance, azure kubernetes service, azure service fabric +3 more +5 moreAzure Virtual Machine Information Disclosure VulnerabilityCVE-2021-270756.8 Medium
- microsoft azure sphereAzure Sphere Unsigned Code Execution VulnerabilityCVE-2021-270746.2 Medium
- microsoft azure sphereAzure Sphere Unsigned Code Execution VulnerabilityCVE-2021-270809.3 Critical
- microsoft azure kubernetes serviceMicrosoft Azure Kubernetes Service Elevation of Privilege VulnerabilityCVE-2021-241096.8 Medium
- azure-iot-cli-extension -, microsoft azure-iot-cli-extension +1 moreAzure IoT CLI extension Elevation of Privilege VulnerabilityCVE-2021-240877.0 High
- kubernetes secrets store csi driver, google secret manager provider for secret store csi driver, hashicorp vault provider for secrets store csi driver +1 more +3 moreKubernetes Secrets Store CSI Driver plugin directory traversalsCVE-2020-8567Fix available4.9 Medium
- microsoft azure kubernetes serviceAzure Active Directory Pod Identity Spoofing VulnerabilityCVE-2021-16775.5 Medium
- microsoft azure sphereA denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft...CVE-2020-356095.5 Medium
- microsoft azure sphereA code execution vulnerability exists in the normal world’s signed code execution functionality...CVE-2020-356087.8 High
- microsoft azure devops server, azure devops server 2019 update 1.1, azure devops server 2019.0.1 +6 more +8 moreAzure DevOps Server and Team Foundation Services Spoofing VulnerabilityCVE-2020-171455.4 Medium
- microsoft azure devops server, azure devops server 2019 update 1.1, azure devops server 2019.0.1 +2 moreAzure DevOps Server Spoofing VulnerabilityCVE-2020-171356.4 Medium
- azure azure-c-shared-utility, azure-uamqp-c, microsoft azure-c-shared-utility release lts 02 2020 ref02 +15 more +17 moreAzure SDK for C Security Feature Bypass VulnerabilityCVE-2020-170027.4 High
- microsoft azure sdk, azure sdk for java +1 moreAzure SDK for Java Security Feature Bypass VulnerabilityCVE-2020-16971Fix available7.4 High
- microsoft azure devops server, azure devops server 2019 update 1.1 +1 moreAzure DevOps Server and Team Foundation Services Spoofing VulnerabilityCVE-2020-13255.4 Medium
- microsoft azure sphereAzure Sphere Unsigned Code Execution VulnerabilityCVE-2020-169947.3 High
- microsoft azure sphereAzure Sphere Elevation of Privilege VulnerabilityCVE-2020-169935.4 Medium
- microsoft azure sphereAzure Sphere Elevation of Privilege VulnerabilityCVE-2020-169927.5 High
- microsoft azure sphereAzure Sphere Unsigned Code Execution VulnerabilityCVE-2020-169917.3 High
- microsoft azure sphereAzure Sphere Information Disclosure VulnerabilityCVE-2020-169906.2 Medium
- microsoft azure sphereAzure Sphere Elevation of Privilege VulnerabilityCVE-2020-169895.4 Medium
- microsoft azure sphereAzure Sphere Elevation of Privilege VulnerabilityCVE-2020-169886.9 Medium
- microsoft azure sphereAzure Sphere Unsigned Code Execution VulnerabilityCVE-2020-169877.3 High
- microsoft azure sphereAzure Sphere Denial of Service VulnerabilityCVE-2020-169866.2 Medium
- microsoft azure sphereAzure Sphere Information Disclosure VulnerabilityCVE-2020-169856.2 Medium
- microsoft azure sphereAzure Sphere Unsigned Code Execution VulnerabilityCVE-2020-169847.3 High
- microsoft azure sphereAzure Sphere Tampering VulnerabilityCVE-2020-169835.7 Medium
- microsoft azure sphereAzure Sphere Unsigned Code Execution VulnerabilityCVE-2020-169826.1 Medium
- microsoft azure sphereAzure Sphere Elevation of Privilege VulnerabilityCVE-2020-169816.1 Medium
- microsoft azure sphereAzure Sphere Unsigned Code Execution VulnerabilityCVE-2020-169708.1 High
- microsoft azure functionsAzure Functions Elevation of Privilege VulnerabilityCVE-2020-169045.3 Medium
- microsoft visual studio code, azure storage explorer, visual studio 2017 version 15.9 (includes 15.0 - 15.8) +5 more +7 moreAn elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they...CVE-2020-14168.8 High
- microsoft azure devops server, azure devops server 2019, azure devops server 2019 update 1.1 +2 moreA Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly...CVE-2020-13265.4 Medium
- microsoft azure devops server, azure devops server 2019, azure devops server 2019 update 1.1 +2 moreA spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle...CVE-2020-13276.1 Medium
- microsoft azure devops server, azure devops server 2019 update 1.1 +1 moreAn elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation...CVE-2020-08157.5 High
- microsoft azure devops server, azure devops server 2019, azure devops server 2019 update 1.1 +2 more +4 moreAn elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation...CVE-2020-07587.5 High
- microsoft azure devops server, azure devops server 2019, azure devops server 2019 update 1.1 +2 more +4 moreA Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly...CVE-2020-07005.4 Medium
- microsoft azure stackA spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure...CVE-2019-1234EPSS 74.6%7.5 High
- microsoft azure app service on azure stackAn remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack...CVE-2019-1372EPSS 18.5%10.0 Critical
- microsoft azure devops server, team foundation server, azure devops server 2019 update 1 +1 more +3 moreA remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation...CVE-2019-1306EPSS 17.0%9.8 Critical
- microsoft team foundation server, azure devops server, team foundation server 2015 +1 more +3 moreA Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly...CVE-2019-13055.4 Medium
- cloud foundry cf cli, anynines elasticsearch, logme +45 more +47 moreCF CLI writes the client id and secret to config fileCVE-2019-38006.3 Medium
- microsoft team foundation server, azure devops server, team foundation server 2018 +2 moreA Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly...CVE-2019-10765.4 Medium
- Show moreLoading…