Azure Logic Apps (Microsoft) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-17. Vendor: Microsoft.

CVEs of Azure Logic Apps

• CVE-2026-70200 - CVSS 10 (critical), 2026-09-17: Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over…
• CVE-2026-83944 - CVSS 10 (critical), 2026-09-17: Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-69400 - CVSS 9.6 (critical), 2026-08-20: Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over…
• CVE-2026-56161 - CVSS 9.6 (critical), 2026-08-06: Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
• CVE-2026-42823 - CVSS 9.9 (critical), 2026-05-12: Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
• CVE-2026-32171 - CVSS 8.8 (high), 2026-04-14: Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
• CVE-2026-21227 - CVSS 9.8 (critical), 2026-01-22: Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over…
• CVE-2023-36019 - CVSS 9.6 (critical), 2023-12-12: Microsoft Power Platform Connector Spoofing Vulnerability