Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:purview:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductPurview (e0464cc1-e144-5f15-9b6f-e12627c936cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/microsoft/purview purl2cpe 2026-06-01 10:17:05.337706

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-26139 vulnerable 2026-06-08 07:53:21.063583 Microsoft Purview Elevation of Privilege Vulnerability
HIGH (8.6)
Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.
Published: 2026-03-19T21:06:21.346Z
Updated: 2026-06-19T18:17:58.048Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26138 vulnerable 2026-06-08 07:53:21.062922 Microsoft Purview Elevation of Privilege Vulnerability
HIGH (8.6)
Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.
Published: 2026-03-19T21:06:21.930Z
Updated: 2026-06-19T18:17:58.589Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64676 vulnerable 2026-06-08 07:39:20.120823 Microsoft Purview eDiscovery Remote Code Execution Vulnerability
HIGH (7.2)
'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network.
Published: 2025-12-18T22:02:07.323Z
Updated: 2026-04-16T14:19:05.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53762 vulnerable 2026-06-08 07:31:15.309551 Microsoft Purview Elevation of Privilege Vulnerability
HIGH (8.7)
Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a network.
Published: 2025-07-18T17:04:46.626Z
Updated: 2026-02-26T17:50:27.077Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21385 vulnerable 2026-06-08 07:08:52.846231 Microsoft Purview Information Disclosure Vulnerability
HIGH (8.8)
A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a network.
Published: 2025-01-09T22:07:25.838Z
Updated: 2026-06-09T18:30:11.802Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.