Microsoft Microsoft Configuration Manager vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Microsoft Configuration Manager: 7 record(s), with affected versions and fixes.
CVE-2026-88075
High · 8.8
CWE-89 Oct 13, 2026
Configuration Manager Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
CVE-2026-70049
High · 8.0
CWE-89 Oct 13, 2026
Microsoft Configuration Manager Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2025-47179
Medium · 6.7
CWE-284 Nov 11, 2025
Configuration Manager Elevation of Privilege Vulnerability
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
CVE-2025-59501
Medium · 4.8
CWE-290 Oct 31, 2025
Microsoft Configuration Manager Spoofing Vulnerability
Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
CVE-2025-59213
High · 8.8
CWE-89 Oct 14, 2025
Configuration Manager Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2025-55320
Medium · 6.8
CWE-89 Oct 14, 2025
Configuration Manager Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2024-43468
Critical · 9.8
KEV High · 69 Public exploit CWE-89 Oct 8, 2024
Microsoft Configuration Manager SQL Injection Vulnerability
Microsoft Configuration Manager Remote Code Execution Vulnerability