8.6
Élevée
CVE-2024-38190 Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a…
Description
Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a network attack vector.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Power Platform | Versions non publiées |
Autres CVE de Microsoft Power Platform
Les 4 CVE de Microsoft Power Platform →
CVE-2026-65818
Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network
8.5
Élevée
CVE-2024-35260
An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over…
8.0
Élevée
CVE-2023-36019
Microsoft Power Platform Connector Spoofing Vulnerability
9.6
Critique