Microsoft Azure Monitor Agent < 1.36.3 Elevation of Privilege (CVE-2025-59285)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.36.3. It is, therefore, affected by a elevation of privilege vulnerability. Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Note that Nessu...

PT-2025-42146

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description An issue exists in Azure Monitor Agent where deserialization of untrusted data can allow an authorized attacker to elevate privileges locally. Recommendations At the moment, there...

PT-2025-42155

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description An improper access control issue exists in Azure Monitor Agent. An authorized attacker can elevate privileges locally. Recommendations At the moment, there is no information about...

Microsoft Azure Monitor 访问控制错误漏洞

Microsoft Azure Monitor is a new style of observability tool from Microsoft USA that enables end-to-end monitoring capabilities for applications, infrastructure and networks. An access control error vulnerability exists in Microsoft Azure Monitor, which stems from an attacker's ability to elevate...

Microsoft Azure Monitor Agent < 1.38.1.0 Elevation of Privilege (CVE-2025-59494)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.38.1.0. It is, therefore, affected by a elevation of privilege vulnerability. Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Note that Nessus has no...

CVE-2025-55321

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an authorized attacker to perform spoofing over a network...

EUVD-2025-33550

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an authorized attacker to perform spoofing over a network...

CVE-2025-55321

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability

...

CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability

...

CVE-2025-55321

CVE-2025-55321 refers to a cross-site scripting vulnerability in Azure Monitor (Azure Monitor Log Analytics) where improper input neutralization during web page generation enables spoofing of the user interface over the network. Affected product family includes Azure Monitor/Log Analytics. The ro...

Azure Monitor Log Analytics Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an unauthorized attacker to perform spoofing over a network...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.20-py3-none-any.whl CVE-2025-32873

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.20-py3-none-any.whl CVE-2025-32873. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-32873 DESCRIPTION: An issue was discovered in Django 4.2 before...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.20-py3-none-any.whl CVE-2025-48432

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.20-py3-none-any.whl CVE-2025-48432. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-48432 DESCRIPTION: An issue was discovered in Django 5.2 before...

CVE-2025-27060

CVE-2025-27060 describes a memory corruption vulnerability in Qualcomm chipsets TZ firmware related to System Configuration Manager (SCM) calls with malformed inputs. Multiple connected sources corroborate the issue as a memory corruption/untrusted pointer dereference scenario with high impact, i...

CVE-2025-27060 Untrusted Pointer Dereference in TZ Firmware

Memory corruption while performing SCM call with malformed inputs...

CVE-2025-27059 Use of Out-of-range Pointer Offset in TZ Firmware

Memory corruption while performing SCM call...

CVE-2025-27059 Use of Out-of-range Pointer Offset in TZ Firmware

Memory corruption while performing SCM call...

PT-2025-41480

Name of the Vulnerable Software and Affected Versions Azure Monitor affected versions not specified Description The software contains a flaw due to improper neutralization of input during web page generation, which can lead to cross-site scripting. An authorized attacker can exploit this to perfo...

Microsoft Azure Monitor 跨站脚本漏洞

Microsoft Azure Monitor is a novel observability tool from Microsoft Corporation USA that enables end-to-end monitoring capabilities for applications, infrastructure, and networks. A cross-site scripting vulnerability exists in Microsoft Azure Monitor that stems from improper input neutralization...