Configuration Manager 2503 (Microsoft) - vulnerabilities (CVEs)
9 CVEs, 2 in the last 30 days, 5 known versions, newest CVE from 2026-10-13. Vendor: Microsoft.
CVEs of Configuration Manager 2503
- CVE-2026-88075 - CVSS 8.8 (high), 2026-10-13: Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to…
- CVE-2026-70049 - CVSS 8 (high), 2026-10-13: Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to…
- CVE-2026-47301 - CVSS 8.8 (high), 2026-07-14: Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
- CVE-2025-47179 - CVSS 6.7 (medium), 2025-11-11: Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
- CVE-2025-59501 - CVSS 4.8 (medium), 2025-10-31: Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
- CVE-2025-59213 - CVSS 8.8 (high), 2025-10-14: Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to…
- CVE-2025-55320 - CVSS 6.8 (medium), 2025-10-14: Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to…
- CVE-2025-47178 - CVSS 8 (high), 2025-07-08: Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to…
- CVE-2024-43468 - CVSS 9.8 (critical), 2024-10-08: Microsoft Configuration Manager Remote Code Execution Vulnerability
