Microsoft Azure Schwachstellen

Zeitverlauf

Vergangenes Jahr

Version

2020.1.28
2022.0.16
2019 Update 1.15
20195
20224

Massnahmen

Official Fix273
Temporary Fix1
Workaround0
Unavailable0
Not Defined10

Ausnutzbarkeit

High5
Functional3
Proof-of-Concept104
Unproven105
Not Defined67

Zugriffsart

Not Defined0
Physical8
Local59
Adjacent14
Network203

Authentisierung

Not Defined0
High103
Low113
None68

Benutzeraktivität

Not Defined0
Required44
None240

C3BM Index

Vergangenes Jahr

CVSSv3 Base

≤10
≤20
≤33
≤426
≤544
≤637
≤785
≤859
≤925
≤105

CVSSv3 Temp

≤10
≤20
≤38
≤439
≤542
≤639
≤799
≤839
≤916
≤102

VulDB

≤10
≤20
≤333
≤431
≤528
≤626
≤738
≤8101
≤923
≤104

NVD

≤10
≤20
≤30
≤40
≤54
≤621
≤723
≤814
≤98
≤1010

CNA

≤10
≤20
≤30
≤42
≤524
≤66
≤756
≤840
≤919
≤103

Hersteller

≤10
≤20
≤31
≤44
≤532
≤617
≤781
≤854
≤920
≤105

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k2
<2k6
<5k27
<10k103
<25k137
<50k6
<100k2
≥100k1

Exploit heute

<1k149
<2k77
<5k43
<10k10
<25k4
<50k1
<100k0
≥100k0

Exploitmarktvolumen

Vergangenes Jahr

🔴 CTI Aktivitäten

Affected Versions (108): 1.0, 1.1, 1.2, 1.3, 1.3.2, 1.4, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.5, 1.6, 1.6.4, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12, 1.13, 1.14, 1.15, 1.16, 1.17, 1.18, 1.19, 1.20, 1.21, 1.22, 1.23, 1.24, 1.25, 2.0, 2.0.3, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 2.10, 2.11, 2.12, 2.13, 2.14, 2.15, 2.16, 2.17, 2.18, 2.19, 2.20, 2.21, 2.22, 2.23, 2.24, 2.25, 2.26, 2.27, 2.28, 2.29, 2.30, 2.31, 2.32, 2.33, 2.34, 2.35, 2.36, 2.37, 2.38, 2.39, 6.1, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.5, 6.1.6, 6.1.7, 6.1.8, 6.1.9, 7, 8, 8.2, 8.6, 9.0, 9.1, 13.1, 14.0, 15.0, 16.0, 17.0, 20.05, 20.07, 2019, 2019 Update 1, 2019 Update 1.1, 2019.0.1, 2019.1.2, 2020.0.1, 2020.0.2, 2020.1.2, 2022, 2022.0.1, 2022.1

Link to Product Website: https://www.microsoft.com/

Softwaretyp: Cloud Software

VeröffentlichtBaseTempSchwachstelle0dayHeuteAusMasCTICVE
19.05.20243.73.6Microsoft Azure Container Registry Information Disclosure$5k-$25k$5k-$25kNot DefinedNot Defined0.33-
17.05.20247.87.6Microsoft Azure Monitor Agent erweiterte Rechte$5k-$25k$0-$5kNot DefinedOfficial Fix0.33CVE-2024-30060
14.05.20245.44.9Microsoft Azure Migrate Cross Site Scripting$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.03CVE-2024-30053
08.05.20244.33.9Microsoft Azure Health Bot Service buffer.SlowBuffer Information Disclosure$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.09
08.05.20246.35.7Microsoft Azure Health Bot Service Javascript Template erweiterte Rechte$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.00
08.05.20246.35.7Microsoft Azure Health Bot Service node.js erweiterte Rechte$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.03
08.05.20245.04.5Microsoft Azure Health Bot Service Table API erweiterte Rechte$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.03
30.04.20248.07.6Microsoft Azure Synapse Analytics erweiterte Rechte$5k-$25k$0-$5kNot DefinedOfficial Fix0.03
29.04.20244.34.3Microsoft Azure AI Playground Markdown erweiterte Rechte$5k-$25k$5k-$25kNot DefinedNot Defined0.04
16.04.20243.53.4Microsoft Azure Site Recovery ASR Service Information Disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.03
09.04.20248.88.1Microsoft Azure CycleCloud erweiterte Rechte$5k-$25k$0-$5kUnprovenOfficial Fix0.07CVE-2024-29993
09.04.20244.84.7Microsoft Azure Identity Library for .NET Information Disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-29992
09.04.20249.08.4Microsoft Azure Kubernetes Service Confidential Containers erweiterte Rechte$5k-$25k$5k-$25kProof-of-ConceptOfficial Fix0.00CVE-2024-29990
09.04.20247.77.1Microsoft Azure Monitor Agent erweiterte Rechte$5k-$25k$0-$5kUnprovenOfficial Fix0.06CVE-2024-29989
09.04.20246.35.7Microsoft Azure AI Search schwache Authentisierung$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2024-29063
09.04.20246.46.1Microsoft Azure Migrate erweiterte Rechte$5k-$25k$0-$5kFunctionalOfficial Fix0.03CVE-2024-26193
09.04.20245.85.3Microsoft Azure Compute Gallery erweiterte Rechte$5k-$25k$0-$5kUnprovenOfficial Fix0.03CVE-2024-21424
09.04.20245.95.4Microsoft Azure Private 5G Core Denial of Service$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2024-20685
12.03.20247.37.0Microsoft Azure Data Studio Local Privilege Escalation$5k-$25k$0-$5kHighOfficial Fix0.00CVE-2024-26203
12.03.20246.86.2Microsoft Azure SDK Information Disclosure$5k-$25k$0-$5kUnprovenOfficial Fix0.04CVE-2024-21421
12.03.20247.87.3Microsoft Azure Automation Open Management Infrastructure Local Privilege Escalation$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.06CVE-2024-21330
12.03.20249.08.4Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2024-21400
13.02.20249.08.4Microsoft Azure Kubernetes Service Confidential Containers Remote Code Execution$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.03CVE-2024-21403
13.02.20245.04.7Microsoft Azure File Sync Local Privilege Escalation$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.03CVE-2024-21397
13.02.20246.25.8Microsoft Azure Active Directory B2C Privilege Escalation$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.04CVE-2024-21381

259 weitere Einträge werden nicht mehr angezeigt

weitere Einträge von Microsoft

Do you want to use VulDB in your project?

Use the official API to access entries easily!