The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted en...
Product
Microsoft azure sdk for java vulnerabilities
2 published CVES affecting Microsoft azure sdk for java, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 2
- High
- 0
- Medium
- 0
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest Microsoft azure sdk for java CVEs
Newest publication first
-
CriticalCVSS 9.1
-
CriticalCVSS 9.1
Azure SDK for Java Security Feature Bypass Vulnerability
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.