9.8
Critique
Exploitée
CVE-2024-43468 Microsoft Configuration Manager SQL Injection Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-89
Description
Microsoft Configuration Manager Remote Code Execution Vulnerability
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Configuration Manager 1.0 | 1.0.0 → < 5.00.9106 | 5.00.9106 |
Références
- Microsoft Configuration Manager Remote Code Execution Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de Microsoft Configuration Manager
Les 9 CVE de Microsoft Configuration Manager →
CVE-2026-88075
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration…
8.8
Élevée
CVE-2026-70049
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration…
8.0
Élevée
CVE-2026-47301
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a…
8.8
Élevée
CVE-2025-47179
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally
6.7
Moyenne