Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:configuration_manager_2403:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductConfiguration Manager 2403 (34a42fdd-d1cf-5d0b-bf5c-3196067fb73f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59501 vulnerable 2026-06-08 07:35:22.109708 Microsoft Configuration Manager Spoofing Vulnerability
MEDIUM (4.8)
Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
Published: 2025-10-31T16:45:40.699Z
Updated: 2026-02-22T17:26:16.812Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59213 vulnerable 2026-06-08 07:35:21.061464 Configuration Manager Elevation of Privilege Vulnerability
HIGH (8.8)
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network.
Published: 2025-10-14T17:01:35.025Z
Updated: 2026-02-26T17:46:58.715Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55320 vulnerable 2026-06-08 07:33:14.617185 Configuration Manager Elevation of Privilege Vulnerability
MEDIUM (6.8)
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.
Published: 2025-10-14T17:00:12.346Z
Updated: 2026-02-22T17:24:15.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47179 vulnerable 2026-06-08 07:27:09.687143 Configuration Manager Elevation of Privilege Vulnerability
MEDIUM (6.7)
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
Published: 2025-11-11T17:59:34.472Z
Updated: 2026-02-26T16:57:26.827Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.