Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:entra_provisioning_service:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductEntra Provisioning Service (a850d9e8-d1c8-537f-b88c-4c242656ea92)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-59115 vulnerable 2026-09-16 04:32:46.875443 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
CRITICAL (9.9)
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
Published: 2026-08-06T22:37:40.751Z
Updated: 2026-10-30T17:19:19.362Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57100 vulnerable 2026-07-29 01:00:29.477538 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
CRITICAL (9.9)
Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
Published: 2026-07-02T22:18:55.289Z
Updated: 2026-11-01T17:32:01.745Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.