← Back

Power Apps

power_apps

Vendor: Microsoft • 6 CVEs

CVEs (6)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
1Power Apps
Jun 17, 2026
Apr 23, 2026
N/A· v4
8.0 HIGH· v3
N/A· v2
Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.
1Microsoft
1Power Apps
Jun 17, 2026
Apr 14, 2026
N/A· v4
9.0 CRITICAL· v3
N/A· v2
Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Power Apps
Jun 17, 2026
Jan 16, 2026
N/A· v4
8.0 HIGH· v3
N/A· v2
Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network.
1Microsoft
1Power Apps
Jun 17, 2026
May 8, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network
1Microsoft
1Power Apps
Jun 17, 2026
Jul 11, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Microsoft Power Apps (online) Spoofing Vulnerability
1Microsoft
1Power Apps
Jun 17, 2026
Jun 14, 2023
N/A· v4
3.0 LOW· v3
N/A· v2
Microsoft Power Apps Spoofing Vulnerability