Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.
Product
Microsoft azure stack hub vulnerabilities
12 published CVES affecting Microsoft azure stack hub, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 12
- Critical
- 4
- High
- 6
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 4
Latest Microsoft azure stack hub CVEs
Newest publication first
-
HighCVSS 7.5 EPSS 1.4%
-
MediumCVSS 5.5 EPSS 0.49%
Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally.
-
CriticalCVSS 9.0 EPSS 1.0%
Azure Stack Hub Elevation of Privilege Vulnerability
-
CriticalCVSS 9.0 EPSS 0.92%
Azure Stack Hub Elevation of Privilege Vulnerability
-
HighCVSS 7.0 EPSS 0.65%
Azure Stack Hub Elevation of Privilege Vulnerability
-
CriticalCVSS 9.3 EPSS 1.2%
Azure Stack Hub Spoofing Vulnerability
-
MediumCVSS 6.5 EPSS 1.3%
Azure Stack Hub Spoofing Vulnerability
-
HighCVSS 7.8 EPSS 0.95%
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
-
HighCVSS 7.8 EPSS 2.9% CISA KEV added 2021-11-03 Exploited in the wild
Open Management Infrastructure Elevation of Privilege Vulnerability
-
HighCVSS 7.8 EPSS 11.4% CISA KEV added 2021-11-03 Exploited in the wild Framework module
Open Management Infrastructure Elevation of Privilege Vulnerability
-
CriticalCVSS 9.8 EPSS 99.9% CISA KEV added 2021-11-03 Ransomware Exploited in the wild Framework module PoC
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
-
HighCVSS 7.8 EPSS 2.7% CISA KEV added 2021-11-03 Exploited in the wild
Open Management Infrastructure Elevation of Privilege Vulnerability
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.