← Back

Azure Web Apps

azure_web_apps

Vendor: Microsoft • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
1Azure Web Apps
Jul 24, 2026
Apr 3, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.
1Microsoft
1Azure Web Apps
Jun 17, 2026
Sep 10, 2024
N/A· v4
9.9 CRITICAL· v3
N/A· v2
An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.