MediumCVSS 6.5
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
Product
Microsoft azure command-line interface vulnerabilities
5 published CVES affecting Microsoft azure command-line interface, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 5
- Critical
- 2
- High
- 2
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest Microsoft azure command-line interface CVEs
Newest publication first
-
-
HighCVSS 8.4
Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (CLI) allows an unauthorized attacker to elevate privileges locally.
-
CriticalCVSS 9.1
Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability
-
HighCVSS 8.6
Azure CLI REST Command Information Disclosure Vulnerability
-
CriticalCVSS 9.8 EPSS 4.1%
Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting machine runs an Azure CLI command where parameter values have been provided by an e...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.