CVE-2022-35829

CVE-2022-35829 is a cross-site scripting (XSS) vulnerability in Microsoft Azure Service Fabric Explorer (SFX). The issue affects older SFX web client versions (SFXv1), allowing a remote attacker to inject scripts and potentially access confidential data. The advisory notes that the vulnerability ...

CVE-2021-27075

CVE-2021-27075 is an Azure information-disclosure vulnerability affecting Azure Virtual Machines across multiple Azure services (e.g., Azure Spring Cloud, AKS, Container Instance, Service Fabric). The underlying root cause is described as an information disclosure flaw allowing access to sensitiv...