6.7
CVE-2025-47179
- EPSS 0.06%
- Veröffentlicht 11.11.2025 18:15:35
- Zuletzt bearbeitet 17.11.2025 17:40:48
- Quelle secure@microsoft.com
- CVE-Watchlists
- Unerledigt
Configuration Manager Elevation of Privilege Vulnerability
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Configuration Manager 2403 Version < 5.00.9128.1037
Microsoft ≫ Configuration Manager 2409 Version < 5.00.9132.1031
Microsoft ≫ Configuration Manager 2503 Version < 5.0.9135.1013
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.192 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| secure@microsoft.com | 6.7 | 0.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.