Microsoft Fixes AI, Cloud, and ERP Security Flaws; One Exploited in Active Attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-49035 | Unauthenticated Privilege Escalation in Microsoft Partner Center | 9.8 | 1% | KEV | KEV |
| CVE-2024-49038 | Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of… | 9.6 | <1% | ||
| CVE-2024-49052 | Missing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a network | 9.8 | <1% | ||
| CVE-2024-49053 | Microsoft Dynamics 365 Sales Spoofing Vulnerability | 7.6 | <1% |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan Nov 29, 2024 AI Security / Cloud Security Microsoft has addressed four security flaws impacting its artificial intelligence (AI), cloud, enterprise resource planning, and Partner Center offerings, including one that it said has been exploited in the wild. The vulnerability that has been tagged with an "Exploitation Detected" assessment is CVE-2024-49035 (CVSS score: 8.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.