6 matches found
CVE-2024-49035
The CVE-2024-49035 issue affects Partner.Microsoft.com (Microsoft Partner Center) and is caused by improper access control, enabling an unauthenticated attacker to elevate privileges over a network. Public metrics show a critical risk (CVSS v3.1: base score up to 9.8; NETWORK attack vector; privi...
CVE-2025-29814
Technical details about CVE-2025-29814 are not provided in the connected documents. Public information here only notes an elevation of privileges in Microsoft Partner Center; no affected versions, exploit details, or fixes are included. Monitor for updates.
CVE-2026-69558
Microsoft Partner Center has an authorization bypass caused by a user-controlled key, enabling an unauthenticated remote attacker to disclose confidential information (CVSS 8.6, HIGH). The flaw requires no privileges or user interaction. No patch version or in-the-wild exploitation details are pr...
CVE-2025-65041
Technical details about CVE-2025-65041 are not publicly disclosed in the provided documents. The materials identify an improper authorization issue in Microsoft Partner Center and indicate elevation of privileges, but no affected versions, vectors, or fixes are specified. Monitor for updates.