GCVE - cpe:2.3:a:microsoft:azure_machine_learning:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:azure_machine_learning:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Azure Machine Learning (`4bde0001-e4b2-5dec-bea4-9fce619bdf15`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-33833`	vulnerable	2026-06-08 07:59:11.406359	Azure Machine Learning Notebook Spoofing Vulnerability HIGH (8.2) Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network. Published: 2026-05-12T16:59:08.705Z Updated: 2026-06-19T16:12:42.282Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33833	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-32207`	vulnerable	2026-06-08 07:57:17.133266	Azure Machine Learning Notebook Spoofing Vulnerability HIGH (8.8) Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network. Published: 2026-05-07T20:58:51.273Z Updated: 2026-06-19T16:11:52.592Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32207	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49747`	vulnerable	2026-06-08 07:29:14.840239	Azure Machine Learning Elevation of Privilege Vulnerability CRITICAL (9.9) Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. Published: 2025-07-18T17:04:44.003Z Updated: 2026-02-26T17:50:28.430Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49747	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49746`	vulnerable	2026-06-08 07:29:14.839028	Azure Machine Learning Elevation of Privilege Vulnerability CRITICAL (9.9) Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. Published: 2025-07-18T17:04:44.617Z Updated: 2026-02-26T17:50:28.125Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49746	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-47995`	vulnerable	2026-06-08 07:27:15.307050	Azure Machine Learning Elevation of Privilege Vulnerability MEDIUM (6.5) Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. Published: 2025-07-18T17:04:45.394Z Updated: 2026-02-26T17:50:27.735Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47995	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-30390`	vulnerable	2026-06-08 07:17:00.159580	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-35625`	vulnerable	2026-06-08 06:06:27.343669	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-28312`	vulnerable	2026-06-08 06:01:10.318606	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-23382`	vulnerable	2026-06-08 05:54:28.305969	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.