« Volver al listado

CVE-2023-36566

Estado: ModificadaMedia (6.5)—

Microsoft Common Data Model SDK Denial of Service Vulnerability

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microsoft — Common Data Model SDK

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-36566",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-36566",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-26T21:49:18.362054Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secure@microsoft.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "Microsoft",
          "product": "Microsoft Common Data Model SDK for Java",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0",
              "lessThan": "1.7.4",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Common Data Model SDK for TypeScript",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0",
              "lessThan": "1.7.4",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Common Data Model SDK for Python",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0",
              "lessThan": "1.7.4",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Common Data Model SDK for C#",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0",
              "lessThan": "1.7.4",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Unknown"
          ]
        }
      ]
    }
  ],
  "published": "2023-10-10T18:15:13.200",
  "references": [
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36566",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36566",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secure@microsoft.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Common Data Model SDK Denial of Service Vulnerability"
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de denegación de servicio en Microsoft Common Data Model SDK "
    }
  ],
  "lastModified": "2026-06-17T06:06:33.420",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:common_data_model_sdk:*:*:*:*:*:c\\#:*:*",
              "vulnerable": true,
              "matchCriteriaId": "45D150BE-C1B5-47EA-8FC1-7791FE0BE759",
              "versionEndExcluding": "1.7.4"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:common_data_model_sdk:*:*:*:*:*:java:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A8F5296-3582-47CB-BCD5-E241A2A52B7B",
              "versionEndExcluding": "1.7.4"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:common_data_model_sdk:*:*:*:*:*:python:*:*",
              "vulnerable": true,
              "matchCriteriaId": "245DDF9B-F18C-43C6-875E-82F9B2007004",
              "versionEndExcluding": "1.7.4"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:common_data_model_sdk:*:*:*:*:*:typescript:*:*",
              "vulnerable": true,
              "matchCriteriaId": "349E2561-D3E0-4C7F-BE6A-E994F587AC0E",
              "versionEndExcluding": "1.7.4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}