Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:configuration_manager_2503:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductConfiguration Manager 2503 (6720ba28-06ad-55bf-98f6-9111c9011cb8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59501 vulnerable 2026-06-08 07:35:22.109846 Microsoft Configuration Manager Spoofing Vulnerability
MEDIUM (4.8)
Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
Published: 2025-10-31T16:45:40.699Z
Updated: 2026-02-22T17:26:16.812Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59213 vulnerable 2026-06-08 07:35:21.060538 Configuration Manager Elevation of Privilege Vulnerability
HIGH (8.8)
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network.
Published: 2025-10-14T17:01:35.025Z
Updated: 2026-02-26T17:46:58.715Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55320 vulnerable 2026-06-08 07:33:14.615710 Configuration Manager Elevation of Privilege Vulnerability
MEDIUM (6.8)
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.
Published: 2025-10-14T17:00:12.346Z
Updated: 2026-02-22T17:24:15.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47179 vulnerable 2026-06-08 07:27:09.687334 Configuration Manager Elevation of Privilege Vulnerability
MEDIUM (6.7)
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
Published: 2025-11-11T17:59:34.472Z
Updated: 2026-02-26T16:57:26.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47178 vulnerable 2026-06-08 07:27:09.681523 Microsoft Configuration Manager Remote Code Execution Vulnerability
HIGH (8)
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to execute code over an adjacent network.
Published: 2025-07-08T16:57:25.690Z
Updated: 2026-02-26T18:27:43.298Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.