← Back

Entra Provisioning Service

entra_provisioning_service

Vendor: Microsoft • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-59115
1Microsoft
1Entra Provisioning Service
Oct 24, 2026
Aug 7, 2026
N/A· v4
9.9 CRITICAL· v3
N/A· v2
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
CVE-2026-57100
1Microsoft
1Entra Provisioning Service
Oct 25, 2026
Jul 2, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.