CVE-2024-38109

CVSS 3.1: 8.8 high
EPSS: 2%p78
Published: Aug 13, 2024 · Aug 13, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-38109 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.

Vendors: microsoft

Products: azure health bot

Weakness: CWE-918

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news

5 stories

Microsoft Patches Critical Copilot Studio Vulnerability Exposing Sensitive Data

The Hacker NewsAug 21, 16:15 UTC · Aug 21, 2024VulnerabilityCVE-2024-38206 CVE-2024-381093 · 1 read

Microsoft fixes 6 zero-days under active attack

Help Net SecurityAug 15, 07:12 UTC · Aug 15, 2024Exploit / PoCExploitedCVE-2024-38178 CVE-2024-38106 CVE-2024-38107+101 · 1 read

Researchers Uncover Vulnerabilities in AI

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2024VulnerabilityExploitedCVE-2024-381094 · 1 read

Critical Vulnerability Found in Microsoft’s AI Healthcare Chatbot

Infosecurity MagazineAug 14, 12:15 UTC · Aug 14, 2024VulnerabilityCVE-2024-381091 · 1 read

Microsoft Patch Tuesday security updates for August 2024 six actively exploited bugs

Security AffairsAug 14, 07:17 UTC · Aug 14, 2024VulnerabilityExploitedCVE-2024-38189 CVE-2024-38178 CVE-2024-38193+124 · 1 read