Skip to contentMicrosoft Azure vulnerabilities
- eclipse jetty, ietf http, http/2 +166 more +168 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2023-44487In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- microsoft azure devops server, azure devops server 2020.1.2, azure devops server 2022 +1 more +3 moreAzure DevOps Server Spoofing VulnerabilityCVE-2023-215695.5 Medium
- microsoft azure devops server, azure devops server 2020.1.2, azure devops server 2022 +1 more +3 moreAzure DevOps Server Spoofing VulnerabilityCVE-2023-215657.1 High
- microsoft azure arc jumpstartAzure Arc Jumpstart Information Disclosure VulnerabilityCVE-2022-357983.3 Low
- microsoft azure machine learningAzure Machine Learning Information Disclosure VulnerabilityCVE-2023-283126.5 Medium
- microsoft azure service connectorAzure Service Connector Security Feature Bypass VulnerabilityCVE-2023-283007.5 High
- microsoft sql server, sql server 2008 r2 service pack 3 (qfe), sql server 2008 service pack 4 (qfe) +11 more +13 moreMicrosoft SQL Server Remote Code Execution VulnerabilityCVE-2023-233847.3 High
- microsoft azure hdinsightAzure Apache Ambari Spoofing VulnerabilityCVE-2023-23408Public exploit4.5 Medium
- microsoft azure service fabric 9.0 for linux, azure service fabric 9.0 for windows, azure service fabric 9.1 for ubuntu +2 more +4 moreService Fabric Explorer Spoofing VulnerabilityCVE-2023-23383EPSS 11.7%8.2 High
- azure setup-kubectl, microsoft azure setup kubectl +1 moreAzure/setup-kubectl: Escalation of privilege vulnerability for v3 and lowerCVE-2023-23939Fix available3.9 Low
- microsoft azure devops server, azure devops server 2020.1.2 +1 moreAzure DevOps Server Remote Code Execution VulnerabilityCVE-2023-215537.5 High
- microsoft azure devops server, azure devops server 2022 +1 moreAzure DevOps Server Cross-Site Scripting VulnerabilityCVE-2023-215647.1 High
- microsoft sql server, sql server 2012 for x64-based systems service pack 4 (qfe), sql server 2012 service pack 4 (qfe) +9 more +11 moreMicrosoft SQL Server Remote Code Execution VulnerabilityCVE-2023-217138.8 High
- microsoft azure data box gateway, azure stack edge +1 moreAzure Data Box Gateway Remote Code Execution VulnerabilityCVE-2023-217036.5 Medium
- microsoft azure machine learningAzure Machine Learning Compute Instance Information Disclosure VulnerabilityCVE-2023-233826.5 Medium
- microsoft sql server, sql server 2008 r2 service pack 3 (qfe), sql server 2008 service pack 4 (qfe) +11 more +13 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityCVE-2023-217187.8 High
- microsoft sql server, sql server 2012 for x64-based systems service pack 4 (qfe), sql server 2012 service pack 4 (qfe) +9 more +11 moreMicrosoft SQL Server Remote Code Execution VulnerabilityCVE-2023-217058.8 High
- microsoft sql server, sql server 2014 service pack 3 (cu 4), sql server 2014 service pack 3 (gdr) +7 more +9 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityCVE-2023-217047.8 High
- microsoft azure app service on azure stack hub, azure app service on azure stack +1 moreAzure App Service on Azure Stack Hub Elevation of Privilege VulnerabilityCVE-2023-217778.7 High
- microsoft sql server, sql server 2008 r2 service pack 3 (qfe), sql server 2008 service pack 4 (qfe) +11 more +13 moreMicrosoft SQL Server Remote Code Execution VulnerabilityCVE-2023-215287.8 High
- microsoft azure service fabric, azure service fabric 8.2, azure service fabric 9.0 for linux +1 more +3 moreAzure Service Fabric Container Elevation of Privilege VulnerabilityCVE-2023-215317.0 High
- azure aad-pod-identity, microsoft azure ad pod identity +1 moreAAD Pod Identity obtaining token with backslashCVE-2022-23551Fix available5.3 Medium
- microsoft azure network watcher agent, azure network watcher vm extension +1 moreAzure Network Watcher Agent Security Feature Bypass VulnerabilityCVE-2022-446995.5 Medium
- microsoft azure cyclecloud, azure cyclecloud 7, azure cyclecloud 8.0.0 +2 moreAzure CycleCloud Elevation of Privilege VulnerabilityCVE-2022-410857.5 High
- microsoft azure rtos guix studioAzure RTOS GUIX Studio Remote Code Execution VulnerabilityCVE-2022-410517.8 High
- microsoft windows subsystem for linux (wsl2), windows subsystem for linux, azure eflow +1 more +3 moreWindows Subsystem for Linux (WSL2) Kernel Elevation of Privilege VulnerabilityCVE-2022-380147.0 High
- azure-rtos filex, microsoft azure rtos filex +1 moreAzure RTOS FileX vulnerable to Buffer OfferflowCVE-2022-393435.6 Medium
- azure-rtos usbx, microsoft azure rtos usbx +1 moreAzure RTOS USBX vulnerable to buffer overflowCVE-2022-393449.8 Critical
- azure azure-cli, microsoft azure command-line interface +1 moreImproper Control of Generation of Code ('Code Injection') in Azure CLICVE-2022-39327Fix available8.1 High
- microsoft azure storsimple 8000 series, storsimple 8010 firmware, storsimple 8020 firmware +2 moreStorSimple 8000 Series Elevation of Privilege VulnerabilityCVE-2022-380176.8 Medium
- microsoft azure stack edge, azure arc-enabled kubernetes, azure arc-enabled kubernetes cluster 1.5.8 +3 more +5 moreAzure Arc-enabled Kubernetes cluster Connect Elevation of Privilege VulnerabilityCVE-2022-3796810.0 Critical
- microsoft azure service fabric explorer, azure service fabric +1 moreService Fabric Explorer Spoofing VulnerabilityCVE-2022-35829EPSS 18.5%6.2 Medium
- microsoft azure arc, azure guest configuration +1 moreAzure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege VulnerabilityCVE-2022-380077.8 High
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Remote Code Execution VulnerabilityCVE-2022-358247.2 High
- microsoft azure sphereAzure Sphere Information Disclosure VulnerabilityCVE-2022-358214.4 Medium
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-358196.5 Medium
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-358186.5 Medium
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-358176.5 Medium
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-358166.5 Medium
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-358156.5 Medium
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-358146.5 Medium
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-358136.5 Medium
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-358116.5 Medium
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-358106.5 Medium
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-358096.5 Medium
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-358086.5 Medium
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-358076.5 Medium
- microsoft azure rtos guix studio, azure real time operating system guix studio +1 moreAzure RTOS GUIX Studio Remote Code Execution VulnerabilityCVE-2022-358067.8 High
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-358028.1 High
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege VulnerabilityCVE-2022-358016.5 Medium
- Show moreLoading…