CVE-2024-43468

CVE-2024-43468 is an unauthenticated SQL injection vulnerability in Microsoft Configuration Manager (ConfigMgr / SCCM) that can lead to remote code execution. Public exploit scripts (e.g., from Synacktiv) demonstrate SQL injections against the site database with MP_Location service that processes...

Microsoft Configuration Manager SQL注入漏洞

Microsoft Configuration Manager is a Microsoft solution for managing computers and servers within an organization that helps IT departments keep software up to date, set configuration and security policies, and monitor system status. A SQL injection vulnerability exists in Microsoft Configuration...

KLA73904 Multiple vulnerabilities in Microsoft System Center

Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Configuration Manager can be...

PT-2024-6731

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager versions prior to 2403 5.00.9128.1024 Microsoft Configuration Manager versions prior to 2309 5.00.9122.1033 Microsoft Configuration Manager versions prior to 2303 5.00.9106.1037 Microsoft Configuration Manager...

CVE-2023-22440

Incorrect default permissions in the IntelR SCS Add-on software installer for Microsoft SCCM all versions may allow an authenticated user to potentially enable escalation of privilege via local access...