Configuration Manager 2409 (Microsoft) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2025-11-11. Vendor: Microsoft.

CVEs of Configuration Manager 2409

• CVE-2025-47179 - CVSS 6.7 (medium), 2025-11-11: Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
• CVE-2025-59501 - CVSS 4.8 (medium), 2025-10-31: Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
• CVE-2025-59213 - CVSS 8.8 (high), 2025-10-14: Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to…
• CVE-2025-55320 - CVSS 6.8 (medium), 2025-10-14: Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to…
• CVE-2024-43468 - CVSS 9.8 (critical), 2024-10-08: Microsoft Configuration Manager Remote Code Execution Vulnerability