Microsoft Azure Sentinel vulnerabilities

6 published CVEs name Microsoft Azure Sentinel among the affected products; CISA lists 4 of them as exploited in the wild.

Critical 1High 5Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2021-38649
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedHigh7.0
CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedHigh7.8
CVE-2021-38647
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedCritical9.8
CVE-2021-38645
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedHigh7.8

CVE-2024-21330
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Microsoft · System Center Operations Manager (SCOM) 2019
High7.8
CVE-2022-29149
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
High7.8
CVE-2021-38649
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedHigh7.0
CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedHigh7.8
CVE-2021-38647
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedCritical9.8
CVE-2021-38645
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedHigh7.8