Vulnerabilidades en Azure Access Technology

39 resultados
Análisis Vexday

Azure Access Technology apresenta carteira de 39 CVEs com 27 classificadas como críticas, porém sem registros de exploração ativa (KEV) no momento. A fraqueza dominante é a validação inadequada de entrada (CWE-20), padrão comum em software de acesso, e nenhuma nova vulnerabilidade foi publicada nos últimos 90 dias, sugerindo risco estabilizado porém estruturalmente elevado.

CVE-2025-12275CRITICALMail Configuration File Manipulation + Command ExecutionEPSS 0.5%CVE-2025-12422CRITICALVulnerable Upgrade Feature (Arbitrary File Write)EPSS 0.5%CVE-2025-12599CRITICALMultiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)EPSS 0.4%CVE-2025-12104CRITICALIncorrect Content-Type HeaderEPSS 0.4%CVE-2025-12516CRITICALLack of Graceful Error Handling - HTTP 5xx ErrorEPSS 0.3%CVE-2025-12219CRITICALVulnerable Components in Azure Access OSEPSS 0.3%CVE-2025-12220CRITICALBusybox 1.31.1 - Multiple Known VulnerabilitiesEPSS 0.3%CVE-2025-12554MEDIUMMissing Security HeadersEPSS 0.3%CVE-2025-12515CRITICALSystemic Internal Server Errors - HTTP 500 ResponseEPSS 0.3%CVE-2025-12600CRITICALWeb UI MalfunctionEPSS 0.3%CVE-2025-11832CRITICALAPIs Lack Rate LimitingEPSS 0.3%CVE-2025-12477CRITICALServer Version DisclosureEPSS 0.3%CVE-2025-12424CRITICALPrivilege Escalation through SUID-bit BinaryEPSS 0.3%CVE-2025-12285CRITICALMissing Initial Password ChangeEPSS 0.3%CVE-2025-12476CRITICALResource Lacking AuthNEPSS 0.3%CVE-2025-12552MEDIUMInsufficient Password PolicyEPSS 0.3%CVE-2025-12364CRITICALWeak Password PolicyEPSS 0.3%CVE-2025-12176CRITICALUndocumented Administrative AccountsEPSS 0.3%CVE-2025-12601CRITICALDenial of Service Due to SlowLorisEPSS 0.3%CVE-2025-12423CRITICALDenial of Service - Protocol ManipulationEPSS 0.3%