Microsoft Entra Provisioning Service vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Entra Provisioning Service: 2 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:entra_provisioning_service
CVE-2026-59115
Critical · 9.9
CWE-35 Aug 6, 2026
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
CVE-2026-57100
High · 8.8
CWE-918 Jul 2, 2026
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.