NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2023-36019

CVSS 3.1: 7.4 high
EPSS: 16%p97
Published: Dec 12, 2023 · Dec 12, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-36019 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Power Platform Connector Spoofing Vulnerability

Vendors: microsoft

Products: azure logic apps, power platform

Weakness: CWE-73

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (15.8%)

In the news

4 stories

Microsoft's Final 2023 Patch Tuesday: 34 Flaws Fixed, Including 4 Critical

The Hacker NewsJan 10, 04:07 UTC · Jan 10, 2024VulnerabilityExploitedCVE-2023-35628 CVE-2023-35630 CVE-2023-35636+93 · 1 read

60

Microsoft Fixes 34 CVEs and One Zero

Infosecurity MagazineDec 13, 10:30 UTC · Dec 13, 2023Exploit / PoCCVE-2023-20588 CVE-2023-35628 CVE-2023-35641+22 · 1 read

60

December 2023 Microsoft Patch Tuesday fixed 4 critical flaws

Security AffairsDec 13, 08:18 UTC · Dec 13, 2023VulnerabilityExploitedCVE-2023-35628 CVE-2023-36019 CVE-2023-356362 · 1 read

60

December 2023 Patch Tuesday: 33 fixes to wind the year down

Help Net SecurityDec 12, 00:00 UTC · Dec 12, 2023VulnerabilityExploitedCVE-2023-35628 CVE-2023-35636 CVE-2023-23397+43 · 1 read

60