Product · Microsoft

Microsoft Configuration Manager

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.8

CVE-2025-59501 Public exploit

Microsoft Configuration Manager Spoofing Vulnerability

Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.

Microsoft Microsoft Configuration Manager Microsoft Configuration Manager 2409

Oct 31, 2025
Medium 6.8

CVE-2025-55320 Public exploit

Configuration Manager Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.

Microsoft Microsoft Configuration Manager Microsoft Configuration Manager 2409

Oct 14, 2025