MediumCVSS 6.5
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
Product
Microsoft azure cli vulnerabilities
4 published CVES affecting Microsoft azure cli, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 4
- Critical
- 1
- High
- 2
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest Microsoft azure cli CVEs
Newest publication first
-
-
HighCVSS 8.0
Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.
-
HighCVSS 8.4
Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (CLI) allows an unauthorized attacker to elevate privileges locally.
-
CriticalCVSS 9.1
Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.