GCVE - cpe:2.3:a:microsoft:azure_automation:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:azure_automation:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Azure Automation (`0e7d7472-4730-5184-bac8-b9eb837202a8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-29827`	vulnerable	2026-06-08 07:14:56.725538	Azure Automation Elevation of Privilege Vulnerability CRITICAL (9.9) Improper authorization in Azure Automation allows an authorized attacker to elevate privileges over a network. Published: 2025-05-08T22:17:25.176Z Updated: 2026-02-13T19:21:35.318Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29827	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-21330`	vulnerable	2026-06-08 06:27:32.604090	Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability HIGH (7.8) Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability Published: 2024-03-12T16:57:56.930Z Updated: 2025-05-03T00:46:57.058Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42306`	vulnerable	2026-06-08 05:35:22.132743	Azure Active Directory Information Disclosure Vulnerability HIGH (8.1) An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as part of an authentication certificate keyCredential  on an Azure AD Application or Service Principal (which is not recommended). This vulnerability allows a user or service in the tenant with application read access to read the private key data that was added to the application. Azure AD addressed this vulnerability by preventing disclosure of any private key values added to the application. Microsoft has identified services that could manifest this vulnerability, and steps that customers should take to be protected. Refer to the FAQ section for more information. For more details on this issue, please refer to the MSRC Blog Entry. Published: 2021-11-24T01:05:13.000Z Updated: 2024-08-04T03:30:38.252Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42306	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-0962`	vulnerable	2026-06-08 05:12:21.219697	Details available An elevation of privilege vulnerability exists in Azure Automation "RunAs account" runbooks for users with contributor role, aka 'Azure Automation Elevation of Privilege Vulnerability'. Published: 2019-07-15T18:56:19.000Z Updated: 2024-08-04T18:06:29.935Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0962	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.