Azure Stack Hub

CVE-2021-38649 Sep 15, 12:15 HIGH KEV PATCH THREAT Act Now

Open Management Infrastructure Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

CVE-2021-38648 Sep 15, 12:15 HIGH POC KEV PATCH THREAT Act Now

Open Management Infrastructure Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

CVE-2021-38647 Sep 15, 12:15 CRITICAL POC KEV PATCH THREAT Act Now

Open Management Infrastructure Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CVE-2021-38645 Sep 15, 12:15 HIGH KEV PATCH THREAT Act Now

Open Management Infrastructure Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

CVE-2025-53793 Aug 12, 18:15 HIGH This Month

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2024-38220 Sep 10, 17:15 CRITICAL PATCH Act Now

Azure Stack Hub Elevation of Privilege Vulnerability. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity.

CVE-2024-38216 Sep 10, 17:15 CRITICAL PATCH Act Now

Azure Stack Hub Elevation of Privilege Vulnerability. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity.

CVE-2024-38201 Aug 13, 18:15 HIGH PATCH This Week

Azure Stack Hub Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0), this vulnerability is no authentication required.

CVE-2024-38108 Aug 13, 18:15 CRITICAL PATCH Act Now

Azure Stack Hub Spoofing Vulnerability. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

CVE-2024-20679 Feb 13, 18:15 MEDIUM PATCH This Month

Azure Stack Hub Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

CVE-2022-29149 Jun 15, 22:15 HIGH PATCH This Week

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.