azure-cli vulnerabilities

Latest azure-cli CVEs

Newest publication first

1. CVE-2022-39327 Improper Control of Generation of Code ('Code Injection') in Azure CLI

   Published 2022-10-25

   Critical·CVSS 9.8 EPSS 4.2%

   Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting machine runs an Azure CLI command where parameter values have been provided by an e...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.