Azure Stack Hub (Microsoft) - vulnerabilities (CVEs)

13 CVEs, 0 in the last 30 days, 19 known versions, newest CVE from 2025-08-12. Vendor: Microsoft.

CVEs of Azure Stack Hub

• CVE-2025-53793 - CVSS 7.5 (high), 2025-08-12: Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.
• CVE-2025-53765 - CVSS 5.5 (medium), 2025-08-12: Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally.
• CVE-2024-38216 - CVSS 9 (critical), 2024-09-10: Azure Stack Hub Elevation of Privilege Vulnerability
• CVE-2024-38220 - CVSS 9 (critical), 2024-09-10: Azure Stack Hub Elevation of Privilege Vulnerability
• CVE-2024-38201 - CVSS 7 (high), 2024-08-13: Azure Stack Hub Elevation of Privilege Vulnerability
• CVE-2024-38108 - CVSS 9.3 (critical), 2024-08-13: Azure Stack Hub Spoofing Vulnerability
• CVE-2024-20679 - CVSS 6.5 (medium), 2024-02-13: Azure Stack Hub Spoofing Vulnerability
• CVE-2023-21777 - CVSS 8.7 (high), 2023-02-14: Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
• CVE-2022-29149 - CVSS 7.8 (high), 2022-06-15: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
• CVE-2021-38649 - CVSS 7.8 (high), 2021-09-15: Open Management Infrastructure Elevation of Privilege Vulnerability
• CVE-2021-38648 - CVSS 7.8 (high), 2021-09-15: Open Management Infrastructure Elevation of Privilege Vulnerability
• CVE-2021-38647 - CVSS 9.8 (critical), 2021-09-15: Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
• CVE-2021-38645 - CVSS 7.8 (high), 2021-09-15: Open Management Infrastructure Elevation of Privilege Vulnerability