Configuration Manager 2403

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-43468 Oct 08, 18:15 CRITICAL KEV THREAT Act Now

Microsoft Configuration Manager Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE SQLi Microsoft Configuration Manager 2503 Configuration Manager 2403 +1

NVD

CVSS 3.1

9.8

EPSS

60.7%

CVE-2025-47179 Nov 11, 18:15 MEDIUM This Month

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Configuration Manager 2503 Configuration Manager 2403 Configuration Manager 2409

NVD

CVSS 3.1

6.7

EPSS

0.1%

CVE-2024-43468

EPSS 61% CVSS 9.8

CRITICAL KEV THREAT Act Now

RCE SQLi Microsoft +3

NVD

CVE-2025-47179

EPSS 0% CVSS 6.7

MEDIUM This Month

Authentication Bypass Microsoft Configuration Manager 2503 +2

NVD