Security Updates for Azure Connected Machine Agent < 1.49

The Microsoft Azure Connected Machine Agent installation on the remote host is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. Note that Nessus has not tested for this issue but has instead...

CVE-2025-49692

Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...

CVE-2025-55316

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally...

CVE-2023-7042 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu, linux-aws, linux-azure-generic, linux-qemu-generic, linux-vmware-generic, linux-gcp-generic, linux-azure, linux-aws-generic, linux-vmware, linux-qemu-rc...

CVE-2024-0193 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu, linux-aws, linux-azure-generic, linux-qemu-generic, linux-vmware-generic, linux-gcp-generic, linux-azure, linux-aws-generic, linux-vmware, linux-qemu-rc...

GHSA-52X7-WCQQ-WFJP vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu, linux-aws, linux-azure-generic, linux-qemu-generic, linux-vmware-generic, linux-gcp-generic, linux-azure, linux-aws-generic, linux-vmware, linux-qemu-rc...

GHSA-VCF9-7QJV-G6Q4 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu, linux-aws, linux-azure-generic, linux-qemu-generic, linux-vmware-generic, linux-gcp-generic, linux-azure, linux-aws-generic, linux-vmware, linux-qemu-rc...

Security update for regionServiceClientConfigAzure

This update for regionServiceClientConfigAzure contains the following fixes: Update to version 3.0.0. bsc1246995 SLE 16 python-requests requires SSL v3 certificates. Update 2 region server certs to support SLE 16 when it gets released. Update dependency name for metadata package, name change in S...

SUSE-SU-2025:03169-1 Security update for regionServiceClientConfigAzure

This update for regionServiceClientConfigAzure contains the following fixes: - Update to version 3.0.0. bsc1246995 + SLE 16 python-requests requires SSL v3 certificates. Update 2 region server certs to support SLE 16 when it gets released. - Update dependency name for metadata package, name chang...

openSUSE Security Advisory (SUSE-SU-2025:03117-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Azure Block Mode Export Failure Due to NetworkAccessPolicyIsDenyAll with Veeam Kasten

Challenge If using Veeam Kasten to protect persistent volumes provisioned with the Azure Disk CSI provisioner, and encounter the following error during the block mode export phase of a policy run: Failure in exporting restorepoint with log details similar to: Access not permitted for resource...

Guidelines for Mass Instant Recovery to Azure

Article Applicability This article contains information related to Veeam Backup & Replication build 13.0.1.180 and later, as performance for IR to Azure was significantly improved starting with this build. Challenge When attempting to perform mass recovery using Instant Recovery to Azure, the...

Linux Distros Unpatched Vulnerability : CVE-2022-41561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The JNDI Data Sources component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition,...

SUSE SLES15 / openSUSE 15 Security Update : regionServiceClientConfigAzure (SUSE-SU-2025:03117-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:03117-1 advisory. - Update to version 3.0.0.bsc1246995 - SLE 16 python-requests requires SSL v3 certificates. Update 2 region server certs to...

Linux Distros Unpatched Vulnerability : CVE-2022-41562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HTML escaping component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIB...

Linux Distros Unpatched Vulnerability : CVE-2024-43591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Azure Command Line Integration CLI Elevation of Privilege Vulnerability CVE-2024-43591 Note that Nessus relies on the presence of the package as reported by the...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in Azure components. A malicious person could exploit the vulnerabilities to grant themselves elevated privileges, or execute arbitrary code. The most serious vulnerability is in the High-Performance Compute Pack HPC and allows an unauthenticated malicious pers...

CVE-2025-55316

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally...

CVE-2025-55316

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally...

CVE-2025-49692

Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...