Microsoft
Microsoft Partner Center: vulnerabilidades y CVE
Microsoft Partner Center tiene 6 vulnerabilidades publicadas, 4 de ellas en los últimos 12 meses. 3 son críticas y 1 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses4
Críticas3
Explotadas activamente1
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-49035 | Crítica (9.8) | 1.3% | ⚠ Explotación activa | 26 nov 2024 | An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network. |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-69558 | Alta (8.6) | 0.97% | — | 20 ago 2026 | Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-34327 | Alta (8.2) | 0.60% | — | 7 may 2026 | Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-24303 | Crítica (9.6) | 0.39% | — | 23 abr 2026 | Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network. |
| CVE-2025-65041 | Crítica (9.8) | 0.77% | — | 18 dic 2025 | Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2025-29814 | Alta (8.8) | 2.2% | — | 21 mar 2025 | Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network. |
| CVE-2024-49035 | Crítica (9.8) | 1.3% | ⚠ Explotación activa | 26 nov 2024 | An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.