CVE-2023-36019

—

CVSS 3.1

7.4 high

EPSS

16%p97

Published

Dec 12, 2023 (Dec 12, 2023)

Modified

Jun 17, 2026

Description

Microsoft Power Platform Connector Spoofing Vulnerability

Vendors: microsoft
Products: azure logic apps, power platform
Weakness: CWE-73
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (15.8%)

In the news4 stories

Microsoft's Final 2023 Patch Tuesday: 34 Flaws Fixed, Including 4 Critical

The Hacker NewsJan 10, 04:07 UTC · Jan 10, 2024Vulnerability in the wildCVE-2023-35628 CVE-2023-35630 CVE-2023-35636+9 CVEs

60

Microsoft Fixes 34 CVEs and One Zero

Infosecurity MagazineDec 13, 10:30 UTC · Dec 13, 2023Exploit / PoC CVE-2023-20588 CVE-2023-35628 CVE-2023-35641+2 CVEs

60

December 2023 Microsoft Patch Tuesday fixed 4 critical flaws

Security AffairsDec 13, 08:18 UTC · Dec 13, 2023Vulnerability in the wildCVE-2023-35628 CVE-2023-36019 CVE-2023-35636

60

December 2023 Patch Tuesday: 33 fixes to wind the year down

Help Net SecurityDec 12, 00:00 UTC · Dec 12, 2023Vulnerability in the wildCVE-2023-35628 CVE-2023-35636 CVE-2023-23397+4 CVEs

60