CVEs (7)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Microsoft 3Configuration Manager 2503 Configuration Manager 2509Configuration Manager 2603Jul 15, 2026 Jul 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network. |
1Microsoft 3Configuration Manager 2403 Configuration Manager 2409Configuration Manager 2503Jun 17, 2026 Nov 11, 2025 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally. |
1Microsoft 3Configuration Manager 2403 Configuration Manager 2409Configuration Manager 2503Jun 17, 2026 Oct 31, 2025 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network. |
1Microsoft 3Configuration Manager 2403 Configuration Manager 2409Configuration Manager 2503Jun 17, 2026 Oct 14, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network. |
1Microsoft 3Configuration Manager 2403 Configuration Manager 2409Configuration Manager 2503Jun 17, 2026 Oct 14, 2025 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network. |
1Microsoft 1Configuration Manager 2503 Jun 17, 2026 Jul 8, 2025 N/A· v4 8.0 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to execute code over an adjacent network. |
1Microsoft 4Configuration Manager Configuration Manager 2403Configuration Manager 2409+1 moreJun 17, 2026 Oct 8, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Microsoft Configuration Manager Remote Code Execution Vulnerability |