67 matches found
CVE-2025-47966 Power Automate Elevation of Privilege Vulnerability
...
CVE-2025-47966
CVE-2025-47966 affects Microsoft Power Automate. The vulnerability is described as an exposure of sensitive information to an unauthenticated actor that could elevate privileges over a network. The issue is rated CVSSv3.1 base score 9.8 (critical), with attack vector: NETWORK, attack complexity: ...
Power Automate Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network...
Microsoft Power Automate 信息泄露漏洞
Microsoft Power Automate is a low-code automation platform from Microsoft Corporation USA that allows users to create automated workflows that connect and integrate with various applications and services. An information disclosure vulnerability exists in Microsoft Power Automate that stems from t...
PT-2025-23979 · Microsoft · Power Automate
Name of the Vulnerable Software and Affected Versions: Power Automate affected versions not specified Description: Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network. Recommendations: At the moment, the...
The vulnerability of the Power Automate for Desktop automation platform on Windows operating systems stems from an uncontrolled search path element, which allows a malicious individual to disclose protected information.
The vulnerability of the Power Automate for Desktop automation platform for Windows operating systems is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...
CVE-2025-29817
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...
CVE-2025-29817
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...
CVE-2025-29817
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...
CVE-2025-29817
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...
CVE-2025-29817
CVE-2025-29817 affects Microsoft Power Automate Desktop. The issue is an uncontrolled search path element in Power Automate that an authorized attacker can exploit to disclose information over a network, with Confidentiality impact HIGH per CVSS. The Connected sources (Microsoft MSRC entry and co...
CVE-2025-29817 Microsoft Power Automate Desktop Information Disclosure Vulnerability
...
CVE-2025-29817 Microsoft Power Automate Desktop Information Disclosure Vulnerability
...
Microsoft Power Automate Desktop Information Disclosure Vulnerability
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...
Microsoft Power Automate 安全漏洞
Microsoft Power Automate is a low-code automation platform from Microsoft Corporation USA that allows users to create automated workflows that connect and integrate various applications and services. A security vulnerability exists in Microsoft Power Automate that stems from insufficient control...
KLA82699 OSI vulnerability in Microsoft Dynamics
An information disclosure vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2025-29817 Related products Power-Automate-for-Desktop CVE list CVE-2025-29817 high Soluti...
PT-2025-16361 · Microsoft · Power Automate
Name of the Vulnerable Software and Affected Versions: Power Automate affected versions not specified Description: The issue is related to an uncontrolled search path element in Power Automate, which allows an authorized attacker to disclose information over a network. Recommendations: At the...
The vulnerability of the Power Automate automation platform, related to improper code generation management, allows a malicious actor to execute arbitrary code.
The vulnerability of the Power Automate automation platform is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Vulnerability fixed in Microsoft Dynamics Power Automate
Microsoft has fixed a vulnerability in Power Automate for Desktops. A malicious party could exploit the vulnerability to execute arbitrary code in the victim's context, potentially gaining access to sensitive data. Successful exploitation requires the malicious party to trick the victim into...