Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
Product
Microsoft Partner Center vulnerabilities
7 published CVES affecting Microsoft Partner Center, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 7
- Critical
- 4
- High
- 3
- Medium
- 0
- Low
- 0
- Unscored
- 0
- CISA KEV
- 1
Latest Microsoft Partner Center CVEs
Newest publication first
-
CriticalCVSS 10.0 EPSS 0.67%
-
HighCVSS 8.6 EPSS 0.97%
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network.
-
HighCVSS 8.2 EPSS 0.64%
Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network.
-
CriticalCVSS 9.6 EPSS 0.39%
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
-
CriticalCVSS 9.8 EPSS 0.77%
Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
-
HighCVSS 8.8 EPSS 2.3%
Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network.
-
CriticalCVSS 9.8 EPSS 1.4% CISA KEV added 2025-02-25 Exploited in the wild
An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.