Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

microsoft azure open management infrastructure - vulnerabilities and exploits

(subscribe to this query)
4.6
CVSSv2
CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft System Center Operations Manager -Microsoft Azure Automation State Configuration -Microsoft Azure Automation Update Management -Microsoft Azure Diagnostics \\(lad\\) -Microsoft Azure Open Management Infrastructure -Microsoft Azure Security Center -Microsoft Azure Sentinel -Microsoft Azure Stack Hub -Microsoft Container Monitoring Solution -Microsoft Log Analytics Agent -
4.6
CVSSv2
CVE-2021-38649
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft System Center Operations Manager -Microsoft Azure Automation State Configuration -Microsoft Azure Automation Update Management -Microsoft Azure Diagnostics \\(lad\\) -Microsoft Azure Open Management Infrastructure -Microsoft Azure Security Center -Microsoft Azure Sentinel -Microsoft Azure Stack Hub -Microsoft Container Monitoring Solution -Microsoft Log Analytics Agent -
4.6
CVSSv2
CVE-2021-38645
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft System Center Operations Manager -Microsoft Azure Automation State Configuration -Microsoft Azure Automation Update Management -Microsoft Azure Diagnostics \\(lad\\) -Microsoft Azure Open Management Infrastructure -Microsoft Azure Security Center -Microsoft Azure Sentinel -Microsoft Azure Stack Hub -Microsoft Container Monitoring Solution -Microsoft Log Analytics Agent -
7.5
CVSSv2
CVE-2021-38647
Open Management Infrastructure Remote Code Execution Vulnerability
Microsoft System Center Operations Manager -Microsoft Azure Automation State Configuration -Microsoft Azure Automation Update Management -Microsoft Azure Diagnostics \\(lad\\) -Microsoft Azure Open Management Infrastructure -Microsoft Azure Security Center -Microsoft Azure Sentinel -Microsoft Azure Stack Hub -Microsoft Container Monitoring Solution -Microsoft Log Analytics Agent -
4.6
CVSSv2
CVE-2022-29149
Azure Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Microsoft Azure Automation State Configuration -Microsoft Azure Automation Update Management -Microsoft Container Monitoring Solution -Microsoft Log Analytics Agent -Microsoft System Center Operations Manager 2016Microsoft System Center Operations Manager 2019Microsoft System Center Operations Manager 2022Microsoft Azure Security CenterMicrosoft Azure SentinelMicrosoft Azure Stack HubMicrosoft Azure DiagnosticsMicrosoft Open Management Infrastructure
NA
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
9.3
CVSSv2
CVE-2021-44228
Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
4.7
CVSSv2
CVE-2017-5754
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
Intel Pentium N N3700Intel Pentium N N3710Intel Celeron N N3000Intel Celeron N N3010Intel Celeron N N3050Intel Celeron N N2930Intel Celeron N N2920Intel Celeron N N2808Intel Celeron N N2807Intel Celeron J J3060Intel Celeron J J1900Intel Atom X3 C3295rkIntel Atom X3 C3235rkIntel Atom Z Z3775dIntel Atom Z Z3775Intel Atom Z Z3736fIntel Atom Z Z3735gIntel Atom Z Z3560Intel Atom Z Z3530Intel Atom Z Z2480Intel Atom Z Z2460Intel Atom C C3308
1.9
CVSSv2
CVE-2017-5715
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Intel Atom C C2308Intel Atom C C2316Intel Atom C C2338Intel Atom C C2350Intel Atom C C2358Intel Atom C C2508Intel Atom C C2516Intel Atom C C2518Intel Atom C C2530Intel Atom C C2538Intel Atom C C2550Intel Atom C C2558Intel Atom C C2718Intel Atom C C2730Intel Atom C C2738Intel Atom C C2750Intel Atom C C2758Intel Atom C C3308Intel Atom C C3338Intel Atom C C3508Intel Atom C C3538Intel Atom C C3558
4.7
CVSSv2
CVE-2017-5753
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Intel Atom C C2308Intel Atom C C2316Intel Atom C C2338Intel Atom C C2350Intel Atom C C2358Intel Atom C C2508Intel Atom C C2516Intel Atom C C2518Intel Atom C C2530Intel Atom C C2538Intel Atom C C2550Intel Atom C C2558Intel Atom C C2718Intel Atom C C2730Intel Atom C C2738Intel Atom C C2750Intel Atom C C2758Intel Atom C C3308Intel Atom C C3338Intel Atom C C3508Intel Atom C C3538Intel Atom C C3558
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook