Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:microsoft_configuration_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductMicrosoft Configuration Manager (30fd0d00-c93b-54af-b82c-f53ad1dcc450)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59501 vulnerable 2026-06-08 07:35:22.108141 Microsoft Configuration Manager Spoofing Vulnerability
MEDIUM (4.8)
Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
Published: 2025-10-31T16:45:40.699Z
Updated: 2026-02-22T17:26:16.812Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59213 vulnerable 2026-06-08 07:35:21.057437 Configuration Manager Elevation of Privilege Vulnerability
HIGH (8.8)
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network.
Published: 2025-10-14T17:01:35.025Z
Updated: 2026-02-26T17:46:58.715Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55320 vulnerable 2026-06-08 07:33:14.614185 Configuration Manager Elevation of Privilege Vulnerability
MEDIUM (6.8)
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.
Published: 2025-10-14T17:00:12.346Z
Updated: 2026-02-22T17:24:15.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47179 vulnerable 2026-06-08 07:27:09.682073 Configuration Manager Elevation of Privilege Vulnerability
MEDIUM (6.7)
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
Published: 2025-11-11T17:59:34.472Z
Updated: 2026-02-26T16:57:26.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47178 vulnerable 2026-06-08 07:27:09.680603 Microsoft Configuration Manager Remote Code Execution Vulnerability
HIGH (8)
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to execute code over an adjacent network.
Published: 2025-07-08T16:57:25.690Z
Updated: 2026-02-26T18:27:43.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43468 vulnerable 2026-06-08 06:45:51.580218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.