Product · Microsoft

Microsoft Configuration Manager 2409

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.8

CVE-2025-59213 Public exploit

Configuration Manager Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network.

Microsoft Microsoft Configuration Manager Microsoft Configuration Manager 2409

Oct 14, 2025