8.8
Élevée
CVE-2025-59213 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration…
Description
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Configuration Manager 2409 1.0 | 1.0.0 → < 5.00.9132.1029 | 5.00.9132.1029 |
| Microsoft Configuration Manager 1.0 | 1.0.0 → < 5.00.9135.1008 | 5.00.9135.1008 |
Références
- Configuration Manager Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft Configuration Manager 2409
Les 4 CVE de Microsoft Configuration Manager 2409 →
CVE-2025-47179
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally
6.7
Moyenne
CVE-2025-59501
Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing…
4.8
Moyenne
CVE-2025-55320
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration…
6.8
Moyenne