CVSS Score
9.8
Description
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network.
Weakness Classification (CWE)
CWE-345
Exploit Prediction (EPSS)
0.33%
Probability of exploitation activity in the next 30 days
25.6th percentile across all scored CVEs
References
Primary Sources
Always verify findings against the primary CVE record before acting. Both sources below are public-domain and authoritative.
Does this affect your version?
Use the CVE Detector to check if a specific product version is impacted by this vulnerability, along with 100+ other CVEs.
CVE data aggregated from the National Vulnerability Database (NVD, public domain) and enriched by dbcve.org.