EUVD-2026-25312
GHSA-7r3r-j3vr-c4w6
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
DescriptionNVD
Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.
Analysis
Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.
Sign in for full analysis, threat intelligence, and remediation guidance.
More from same product – last 7 days
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap
Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network.
Privilege escalation in Azure IoT Central enables authenticated attackers to gain unauthorized access to sensitive infor
The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such a
Use after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromise
Share
External POC / Exploit Code
Leaving vuln.today