CVE-2025-55321

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability

...

CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability

...

CVE-2025-55321

CVE-2025-55321 refers to a cross-site scripting vulnerability in Azure Monitor (Azure Monitor Log Analytics) where improper input neutralization during web page generation enables spoofing of the user interface over the network. Affected product family includes Azure Monitor/Log Analytics. The ro...

Azure Monitor Log Analytics Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an unauthorized attacker to perform spoofing over a network...

Microsoft Azure Monitor 跨站脚本漏洞

Microsoft Azure Monitor is a novel observability tool from Microsoft Corporation USA that enables end-to-end monitoring capabilities for applications, infrastructure, and networks. A cross-site scripting vulnerability exists in Microsoft Azure Monitor that stems from improper input neutralization...

PT-2025-41480

Name of the Vulnerable Software and Affected Versions Azure Monitor affected versions not specified Description The software contains a flaw due to improper neutralization of input during web page generation, which can lead to cross-site scripting. An authorized attacker can exploit this to perfo...

EUVD-2024-35763

Malicious code in bioql PyPI...

EUVD-2024-26961

Malicious code in bioql PyPI...

EUVD-2025-20534

Malicious code in bioql PyPI...

EUVD-2024-37783

Malicious code in bioql PyPI...

EUVD-2024-27997

Malicious code in bioql PyPI...

Microsoft Azure Monitor Code Injection Vulnerability

Microsoft Azure Monitor is a new observability tool from Microsoft that enables end-to-end monitoring capabilities for applications, infrastructure and networks. A security vulnerability exists in Microsoft Azure Monitor. An attacker exploiting this vulnerability could remotely execute code...

The vulnerability of the data collection tool for Azure Monitor Agents, which operates on virtual machines and physical servers, stems from improper code generation. This allows attackers to execute arbitrary code.

Vulnerability of the data collection tool for Azure Monitor Agent, which processes virtual machines and physical servers, due to improper code generation management. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2025-47988

Improper control of generation of code 'code injection' in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network...

CVE-2025-47988

Improper control of generation of code 'code injection' in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network...

CVE-2025-47988

Improper control of generation of code 'code injection' in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network...

CVE-2025-47988 Azure Monitor Agent Remote Code Execution Vulnerability

...

CVE-2025-47988 Azure Monitor Agent Remote Code Execution Vulnerability

...

CVE-2025-47988

Azure Monitor Agent (Microsoft) is vulnerable to CVE-2025-47988 due to improper control of code generation, enabling remote code execution over an adjacent network. Connected sources confirm affected versions are older than 1.35.1 and describe the issue as remote code execution via code injection...