CVE-2025-65041 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	10 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
microsoft	CNA	10 CRITICAL				CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:T/RC:C
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 25%

Common Weakness Enumeration

CWE-285 - Improper Authorization
The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Vulnerability Media Exposure

[GERMAN] Microsoft Azure Komponenten: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Azure Cosmos DB und anderen Microsoft Azure Komponenten ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen und um einen Cross-Site Scripting Angriff zu starten.
Published: 2025-12-18T23:00:00+00:00

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-65041