CVE-2025-21351

Windows Active Directory Domain Services API Denial of Service Vulnerability...

CVE-2025-21351

Windows Active Directory Domain Services API Denial of Service Vulnerability...

CVE-2025-21351 Windows Active Directory Domain Services API Denial of Service Vulnerability

...

CVE-2025-21351 Windows Active Directory Domain Services API Denial of Service Vulnerability

...

CVE-2025-21351

CVE-2025-21351 is a Windows AD DS API Denial of Service vulnerability. The initial record notes a network‑vector DoS impacting AD DS APIs with a CVSS v3.1 base score of 7.5 (HIGH) and no user interaction required. Connected documents indicate Microsoft has released updates addressing vulnerabilit...

CVE-2025-0589

In affected versions of Octopus Deploy where customers are using Active Directory for authentication it was possible for an unauthenticated user to make an API request against two endpoints which would retrieve some data from the associated Active Directory. The requests when crafted correctly...

CVE-2025-0589

In affected versions of Octopus Deploy where customers are using Active Directory for authentication it was possible for an unauthenticated user to make an API request against two endpoints which would retrieve some data from the associated Active Directory. The requests when crafted correctly...

CVE-2025-0589

In affected versions of Octopus Deploy where customers are using Active Directory for authentication it was possible for an unauthenticated user to make an API request against two endpoints which would retrieve some data from the associated Active Directory. The requests when crafted correctly...

CVE-2025-0589

CVE-2025-0589 affects Octopus Deploy when using Active Directory for authentication. An unauthenticated actor can issue API requests to two endpoints and retrieve data from the associated AD: one endpoint returns user profile details (Email address/UPN and Display name); the other returns group i...

CVE-2025-0589

In affected versions of Octopus Deploy where customers are using Active Directory for authentication it was possible for an unauthenticated user to make an API request against two endpoints which would retrieve some data from the associated Active Directory. The requests when crafted correctly...

Windows Active Directory Domain Services API Denial of Service Vulnerability

...

Microsoft Active Directory Domain Services 资源管理错误漏洞

Microsoft Active Directory Domain Services is a key service from Microsoft Corporation USA used to manage and organize resources, users, computers, and other security objects in a network. A resource management error vulnerability exists in Microsoft Active Directory Domain Services. An attacker...

CVE-2025-21351: Uncontrolled Resource Consumption

Windows Active Directory Domain Services API Denial of Service Vulnerability...

PT-2025-6171 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: In affected versions of Octopus Deploy where customers are using Active Directory for authentication, it was possible for an unauthenticated user to make an API request against two...

Octopus Server 安全漏洞

Octopus Server is a deployment automation and release management tool for continuous delivery from Octopus Australia. A security vulnerability exists in Octopus Server that stems from a customer using Active Directory for authentication, where an unauthenticated user could issue API requests to t...

CVE-2025-0589: Incorrect Use of Privileged APIs

In affected versions of Octopus Deploy where customers are using Active Directory for authentication it was possible for an unauthenticated user to make an API request against two endpoints which would retrieve some data from the associated Active Directory. The requests when crafted correctly...

PT-2025-6309 · Microsoft · Windows Active Directory Domain Services +1

Name of the Vulnerable Software and Affected Versions: Windows Active Directory Domain Services affected versions not specified Description: The issue is related to an uncontrolled resource consumption in the Windows Active Directory Domain Services API, which can lead to a denial of service. Thi...

SUSE-SU-2025:0401-1 Security update for crypto-policies, krb5

This update for crypto-policies and krb5 fixes the following issues: Security issue fixed: - CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash bsc1236619. Feature addition: - Add crypto-policies support; jscPED-12018 The defaul...

CVE-2021-37705

OneFuzz is an open source self-hosted Fuzzing-As-A-Service platform. Starting with OneFuzz 2.12.0 or greater, an incomplete authorization check allows an authenticated user from any Azure Active Directory tenant to make authorized API calls to a vulnerable OneFuzz instance. To be vulnerable, a...

CVE-2025-0069

Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a...