Skip to main content

Windows Admin Center CVE-2023-29347

MEDIUM
Cross-site Scripting (XSS) (CWE-79)
2023-07-11 secure@microsoft.com
6.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.8 MEDIUM
AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Jul 11, 2023 - 18:15 nvd
MEDIUM 6.8

DescriptionNVD

Windows Admin Center Spoofing Vulnerability

AnalysisAI

Windows Admin Center Spoofing Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

Technical ContextAI

This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. Affected products include: Microsoft Windows Admin Center.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.

CVE-2026-56196 HIGH
8.8 Jul 14

Remote code execution in Microsoft Windows Admin Center allows an authenticated attacker to run arbitrary code over the

CVE-2026-56197 HIGH
8.8 Jul 14

Authenticated remote code execution in Microsoft Windows Admin Center (CWE-77) lets an attacker with low-privilege acces

CVE-2019-0813 CRITICAL
9.8 Apr 09

An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain s

CVE-2026-56169 HIGH
8.1 Jul 14

Privilege elevation in Microsoft Windows Admin Center allows an already-authenticated (low-privileged) network attacker

CVE-2026-58631 HIGH
7.8 Jul 14

Local privilege-to-code-execution in Microsoft Windows Admin Center lets an already-authenticated, lower-privileged user

CVE-2026-57107 HIGH
7.8 Jul 14

Local privilege escalation in Microsoft Windows Admin Center allows an already-authenticated, low-privileged attacker to

CVE-2026-26119 HIGH
8.8 Feb 17

Windows Admin Center's authentication mechanism can be bypassed by authenticated network users to gain elevated privileg

CVE-2026-23660 HIGH
7.8 Mar 10

Windows Admin Center in Azure Portal contains an access control flaw that enables local authenticated users to escalate

CVE-2026-56185 MEDIUM
6.5 Jul 14

Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.

CVE-2026-20965 HIGH
7.5 Jan 13

Windows Admin Center fails to properly validate cryptographic signatures, enabling high-privileged users to bypass secur

CVE-2025-29819 MEDIUM
6.2 Apr 08

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose i

CVE-2021-27066 MEDIUM
4.3 Mar 11

Windows Admin Center Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remo

Share

CVE-2023-29347 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy