Configuration Manager 2403

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-47179 MEDIUM This Month

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Microsoft Authentication Bypass Configuration Manager 2403 Configuration Manager 2409 Configuration Manager 2503

NVD

CVSS 3.1

6.7

EPSS

0.1%

CVE-2024-43468 CRITICAL KEV THREAT Act Now

Microsoft Configuration Manager Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi RCE Microsoft Configuration Manager 2403 Configuration Manager 2409 +1

NVD

CVSS 3.1

9.8

EPSS

60.7%

CVE-2025-47179

EPSS 0% CVSS 6.7

MEDIUM This Month

Microsoft Authentication Bypass Configuration Manager 2403 +2

NVD

CVE-2024-43468

EPSS 61% CVSS 9.8

CRITICAL KEV THREAT Act Now

SQLi RCE Microsoft +3

NVD