GCVE - cpe:2.3:a:microsoft:azure_logic_apps:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:azure_logic_apps:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Azure Logic Apps (`ce637ec0-e574-5c40-9197-8b2cd752cb02`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/azure/logicapps`	purl2cpe	2026-06-01 10:17:06.721877

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-42823`	vulnerable	2026-06-08 08:03:16.712106	Azure Logic Apps Elevation of Privilege Vulnerability CRITICAL (9.9) Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network. Published: 2026-05-12T16:59:33.549Z Updated: 2026-06-19T16:13:03.379Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42823	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-32171`	vulnerable	2026-06-08 07:57:16.947023	Azure Logic Apps Elevation of Privilege Vulnerability HIGH (8.8) Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network. Published: 2026-04-14T16:58:31.359Z Updated: 2026-06-19T16:08:45.116Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32171	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-21227`	vulnerable	2026-06-08 07:49:14.441383	Azure Logic Apps Elevation of Privilege Vulnerability HIGH (8.2) Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. Published: 2026-01-22T22:47:37.562Z Updated: 2026-04-01T13:49:26.311Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21227	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-36019`	vulnerable	2026-06-08 06:06:28.376899	Microsoft Power Platform Connector Spoofing Vulnerability CRITICAL (9.6) Microsoft Power Platform Connector Spoofing Vulnerability Published: 2023-12-12T18:10:44.773Z Updated: 2025-01-01T02:18:32.466Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36019	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.