What is the CVSS score of CVE-2025-47988?

CVE-2025-47988 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Azure Monitor Agent are affected by CVE-2025-47988?

CVE-2025-47988 is a code injection vulnerability in Azure Monitor Agent that allows network-adjacent attackers to execute arbitrary code with a CVSS score of 7.5.. A patch is available.

How to fix or mitigate CVE-2025-47988?

Within 24 hours: Identify all systems running Azure Monitor Agent and document current versions in use. Within 7 days: Apply vendor-released patch to all Azure Monitor Agent instances; consult Microsoft security advisories for the specific remediated version. Within 30 days: Validate patch deployment across all environments and confirm monitoring functionality remains operational; implement network segmentation controls to limit agent exposure to adjacent networks where possible.

Azure Monitor Agent CVE-2025-47988

EUVD-2025-20534 HIGH

Code Injection (CWE-94)

2025-07-08 secure@microsoft.com

Microsoft RCE Code Injection Azure Monitor Agent

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:33 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

1.35.1

EUVD ID Assigned

Mar 16, 2026 - 04:21 euvd

EUVD-2025-20534

Analysis Generated

Mar 16, 2026 - 04:21 vuln.today

CVE Published

Jul 08, 2025 - 17:15 nvd

HIGH 7.5

DescriptionCVE.org

Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network.

Analysis

Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network.

Technical ContextAI

Remote code execution allows an attacker to run arbitrary commands or code on the target system over a network without prior authentication. This vulnerability is classified as Code Injection (CWE-94).

RemediationAI

Apply vendor patches immediately. Restrict network access to vulnerable services. Implement network segmentation and monitoring for anomalous activity.