Microsoft Azure Site Recovery vulnerabilities

37 CVEs affecting Microsoft Azure Site Recovery, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-21364, published 2024-02-13.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-24515, published 2022-03-09. Medium severity, CVSS 6.5. EPSS: 2.8% chance of exploitation in the next 30 days. Azure Site Recovery Elevation of Privilege Vulnerability
• CVE-2022-24519, published 2022-03-09. Medium severity, CVSS 6.5. EPSS: 2.8% chance of exploitation in the next 30 days. Azure Site Recovery Elevation of Privilege Vulnerability
• CVE-2022-24518, published 2022-03-09. Medium severity, CVSS 6.5. EPSS: 2.8% chance of exploitation in the next 30 days. Azure Site Recovery Elevation of Privilege Vulnerability
• CVE-2022-24506, published 2022-03-09. Medium severity, CVSS 6.5. EPSS: 2.8% chance of exploitation in the next 30 days. Azure Site Recovery Elevation of Privilege Vulnerability
• CVE-2022-24469, published 2022-03-09. High severity, CVSS 8.1. EPSS: 2.8% chance of exploitation in the next 30 days. Azure Site Recovery Elevation of Privilege Vulnerability
• CVE-2022-26897, published 2022-04-15. Medium severity, CVSS 4.9. EPSS: 2.5% chance of exploitation in the next 30 days. Azure Site Recovery Information Disclosure Vulnerability
• CVE-2022-26896, published 2022-04-15. Medium severity, CVSS 4.9. EPSS: 2.5% chance of exploitation in the next 30 days. Azure Site Recovery Information Disclosure Vulnerability
• CVE-2022-24520, published 2022-03-09. High severity, CVSS 7.2. EPSS: 2.4% chance of exploitation in the next 30 days. Azure Site Recovery Remote Code Execution Vulnerability
• CVE-2022-24517, published 2022-03-09. High severity, CVSS 7.2. EPSS: 2.4% chance of exploitation in the next 30 days. Azure Site Recovery Remote Code Execution Vulnerability
• CVE-2022-24471, published 2022-03-09. High severity, CVSS 7.2. EPSS: 2.4% chance of exploitation in the next 30 days. Azure Site Recovery Remote Code Execution Vulnerability

Latest

• CVE-2024-21364, published 2024-02-13. Critical severity, CVSS 9.3. EPSS: 0.6% chance of exploitation in the next 30 days. Microsoft Azure Site Recovery Elevation of Privilege Vulnerability
• CVE-2022-35824, published 2022-08-09. High severity, CVSS 7.2. EPSS: 2.4% chance of exploitation in the next 30 days. Azure Site Recovery Remote Code Execution Vulnerability
• CVE-2022-35819, published 2022-08-09. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. Azure Site Recovery Elevation of Privilege Vulnerability
• CVE-2022-35818, published 2022-08-09. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. Azure Site Recovery Elevation of Privilege Vulnerability
• CVE-2022-35817, published 2022-08-09. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. Azure Site Recovery Elevation of Privilege Vulnerability
• CVE-2022-35816, published 2022-08-09. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. Azure Site Recovery Elevation of Privilege Vulnerability
• CVE-2022-35815, published 2022-08-09. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. Azure Site Recovery Elevation of Privilege Vulnerability
• CVE-2022-35814, published 2022-08-09. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. Azure Site Recovery Elevation of Privilege Vulnerability
• CVE-2022-35813, published 2022-08-09. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. Azure Site Recovery Elevation of Privilege Vulnerability
• CVE-2022-35812, published 2022-08-09. Medium severity, CVSS 4.9. EPSS: 2.2% chance of exploitation in the next 30 days. Azure Site Recovery Elevation of Privilege Vulnerability