Microsoft Configuration Manager 2409 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Configuration Manager 2409: 5 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:configuration_manager_2409
CVE-2025-47179
Medium · 6.7
CWE-284 Nov 11, 2025
Configuration Manager Elevation of Privilege Vulnerability
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-59501
Medium · 4.8
CWE-290 Oct 31, 2025
Microsoft Configuration Manager Spoofing Vulnerability
Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
CVE-2025-59213
High · 8.8
CWE-89 Oct 14, 2025
Configuration Manager Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2025-55320
Medium · 6.8
CWE-89 Oct 14, 2025
Configuration Manager Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2024-43468
Critical · 9.8
KEV High · 69 Public exploit CWE-89 Oct 8, 2024
Microsoft Configuration Manager SQL Injection Vulnerability
Microsoft Configuration Manager Remote Code Execution Vulnerability