Microsoft Azure Stack Hub vulnerabilities
11 published CVEs name Microsoft Azure Stack Hub among the affected products; CISA lists 4 of them as exploited in the wild.
- Published CVEs
- 11
- Last 12 months
- 0
- Critical
- 3
- Known exploited
- 4
Critical 3High 6Medium 2Low 0Not scored 0
CVEs per yearBy the year they were published
- 20214
- 20221
- 20245
- 20251
Known exploitedNewest addition to KEV first
- CVE-2021-38649
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedHigh7.0 - CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedHigh7.8 - CVE-2021-38647
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedCritical9.8 - CVE-2021-38645
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedHigh7.8
Newest CVEs
- CVE-2025-53765
Azure Stack Hub Information Disclosure Vulnerability
Microsoft · Azure Stack Hub
Medium4.4 - CVE-2024-38220
Azure Stack Hub Elevation of Privilege Vulnerability
Microsoft · Azure Stack Hub
Critical9.0 - CVE-2024-38216
Azure Stack Hub Elevation of Privilege Vulnerability
Microsoft · Azure Stack Hub
High8.2 - CVE-2024-38201
Azure Stack Hub Elevation of Privilege Vulnerability
Microsoft · Azure Stack Hub
High7.0 - CVE-2024-38108
Azure Stack Hub Spoofing Vulnerability
Microsoft · Azure Stack Hub
Critical9.3 - CVE-2024-20679
Azure Stack Hub Spoofing Vulnerability
Microsoft · Azure Stack Hub
Medium6.5 - CVE-2022-29149
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
High7.8 - CVE-2021-38649
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedHigh7.0 - CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedHigh7.8 - CVE-2021-38647
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Microsoft · Azure Automation State Configuration, DSC Extension
ExploitedCritical9.8