VDB
GCVE-110-NCSC-2024-393
GCVE-110-NCSC-2024-393
Advisory PublishedCVSS 7.1/10
Improper Neutralization of Special Elements used in a Command ('Command Injection')
Weaknesses (CWE)
CWE-59Improper Link Resolution Before File Access ('Link Following')CWE-862Missing AuthorizationCWE-122Heap-based Buffer OverflowCWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')
Risk Scores
CVSS 3.1
7.1/10
High · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| microsoft | azure_monitor | — | — |
| microsoft | azure_service_fabric_for_linux | — | — |
| microsoft | azure_stack_hci | — | — |
| microsoft | azure_cli | — | — |
| microsoft | azure_service_connector | — | — |
Browse GCVE Records
73,834 records in the GCVE database · Updated July 19, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.