GCVE - cpe:2.3:a:microsoft:azure_logic_apps:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:azure_logic_apps:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Azure Logic Apps (`ce637ec0-e574-5c40-9197-8b2cd752cb02`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/azure/logicapps`	purl2cpe	2026-06-01 10:17:06.723393

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-69400`	vulnerable	2026-09-16 04:34:16.809591	Azure Logic Apps Elevation of Privilege Vulnerability CRITICAL (9.6) Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. Published: 2026-08-20T21:47:10.756Z Updated: 2026-09-16T16:27:08.142Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69400	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-42823`	vulnerable	2026-06-08 08:03:16.722500	Azure Logic Apps Elevation of Privilege Vulnerability CRITICAL (9.9) Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network. Published: 2026-05-12T16:59:33.549Z Updated: 2026-08-10T15:13:40.356Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42823	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-32171`	vulnerable	2026-06-08 07:57:16.947991	Azure Logic Apps Elevation of Privilege Vulnerability HIGH (8.8) Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network. Published: 2026-04-14T16:58:31.359Z Updated: 2026-08-14T16:31:18.876Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32171	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-21227`	vulnerable	2026-06-08 07:49:14.442278	Azure Logic Apps Elevation of Privilege Vulnerability HIGH (8.2) Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. Published: 2026-01-22T22:47:37.562Z Updated: 2026-07-30T20:47:33.327Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21227	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.