Microsoft
Microsoft Azure Logic Apps: vulnerabilidades y CVE
Microsoft Azure Logic Apps tiene 8 vulnerabilidades publicadas, 7 de ellas en los últimos 12 meses. 6 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses7
Críticas6
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-83944 | Crítica (9.1) | 0.44% | — | 17 sept 2026 | Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-70200 | Crítica (9.8) | 0.60% | — | 17 sept 2026 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-69400 | Crítica (9.6) | 0.94% | — | 20 ago 2026 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-56161 | Crítica (9.6) | 0.69% | — | 7 ago 2026 | Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network. |
| CVE-2026-42823 | Crítica (9.9) | 0.78% | — | 12 may 2026 | Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-32171 | Alta (8.8) | 0.78% | — | 14 abr 2026 | Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-21227 | Crítica (9.8) | 0.56% | — | 22 ene 2026 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2023-36019 | Alta (7.4) | 16% | — | 12 dic 2023 | Microsoft Power Platform Connector Spoofing Vulnerability |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.