8.4
Élevée
CVE-2026-41098 Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an…
Description
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an authorized attacker to perform spoofing over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Azure Stack Edge 2.2 | 2.2.0 → < 3.3.2604.3097 | 3.3.2604.3097 |
Autres CVE de Azure Stack Edge
Les 4 CVE de Azure Stack Edge →
CVE-2026-47643
External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network
9.8
Critique
CVE-2023-21703
Azure Data Box Gateway Remote Code Execution Vulnerability
6.5
Moyenne
CVE-2022-37968
Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters
10.0
Critique