VDB

GCVE-110-NCSC-2025-156

GCVE-110-NCSC-2025-156
Advisory PublishedCVSS 7.0/10
Vulnetix · Advisory published May 13, 2025
Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten.

Weaknesses (CWE)

CWE-284Improper Access ControlCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-798Use of Hard-coded CredentialsCWE-918Server-Side Request Forgery (SSRF)CWE-285Improper Authorization

Risk Scores

CVSS 3.1
7.0/10
High · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
Microsoftvers:unknown/1.0.0|<10.1.26100.3478
Microsoftvers:unknown/1.0.0|<10.1.17763.7010
Microsoftvers:unknown/1.0.0|<10.1.19041.5609
Microsoftvers:microsoft/unknown
Microsoftvers:unknown/1.0.0|<10.1.20348.3330
Microsoftvers:unknown/1.0.0|<10.1.22621.5040

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

74,267 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›