Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Azure Logic Apps
Total 8 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-42823 1 Microsoft 1 Azure Logic Apps 2026-10-26 N/A 9.9 CRITICAL
Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
CVE-2026-32171 1 Microsoft 1 Azure Logic Apps 2026-10-25 N/A 8.8 HIGH
Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
CVE-2026-56161 1 Microsoft 1 Azure Logic Apps 2026-10-24 N/A 9.6 CRITICAL
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
CVE-2026-69400 1 Microsoft 1 Azure Logic Apps 2026-10-18 N/A 9.6 CRITICAL
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70200 1 Microsoft 1 Azure Logic Apps 2026-09-25 N/A 10.0 CRITICAL
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83944 1 Microsoft 1 Azure Logic Apps 2026-09-25 N/A 10.0 CRITICAL
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-21227 1 Microsoft 1 Azure Logic Apps 2026-06-17 N/A 8.2 HIGH
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
CVE-2023-36019 1 Microsoft 2 Azure Logic Apps, Power Platform 2026-06-17 N/A 9.6 CRITICAL
Microsoft Power Platform Connector Spoofing Vulnerability