Azure Sdk For Java
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:azure_sdk_for_java:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Azure Sdk For Java (a30ffefa-d833-59bf-b46d-4322294391e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/azure/azure-sdk-for-java |
purl2cpe | 2026-06-01 10:17:06.207050 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-33117 |
vulnerable | 2026-06-08 07:57:18.690080 |
Azure SDK for Java Security Feature Bypass Vulnerability
CRITICAL (9.1)
The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted encrypted input may bypass integrity verification checks. Operations delegated to the Key Vault service are not affected. The issue is addressed in version 4.10.6.
Published: 2026-05-12T16:58:17.299Z
Updated: 2026-06-19T16:12:00.447Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16971 |
vulnerable | 2026-06-08 05:20:55.067308 |
Azure SDK for Java Security Feature Bypass Vulnerability
HIGH (7.4)
Azure SDK for Java Security Feature Bypass Vulnerability
Published: 2020-12-09T23:36:37.000Z
Updated: 2026-06-09T18:08:16.883Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.