CVE-2025-59503

EPSS 0.08%
Veröffentlicht 23.10.2025 21:18:06
Zuletzt bearbeitet 31.12.2025 02:30:53
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Azure Compute Resource Provider Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.08%	0.238

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
secure@microsoft.com	10	3.9	6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE-918 Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59503

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-59503

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-59503

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-59503

EUVD