CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-47988

Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 53.5%

CVSS Severity

CVSS v3 Score 7.5

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47988

Products affected by CVE-2025-47988

Microsoft » Azure Monitor Agent » Version: N/A

cpe:2.3:a:microsoft:azure_monitor_agent:-
Microsoft » Azure Monitor Agent » Version: 1.24.0

cpe:2.3:a:microsoft:azure_monitor_agent:1.24.0
Microsoft » Azure Monitor Agent » Version: 1.26.0

cpe:2.3:a:microsoft:azure_monitor_agent:1.26.0
Microsoft » Azure Monitor Agent » Version: 1.30.0

cpe:2.3:a:microsoft:azure_monitor_agent:1.30.0
Microsoft » Azure Monitor Agent » Version: 1.31.0

cpe:2.3:a:microsoft:azure_monitor_agent:1.31.0
Microsoft » Azure Monitor Agent » Version: 1.32.0

cpe:2.3:a:microsoft:azure_monitor_agent:1.32.0
Microsoft » Azure Monitor Agent » Version: 1.32.6

cpe:2.3:a:microsoft:azure_monitor_agent:1.32.6
Microsoft » Azure Monitor Agent » Version: 1.33.1

cpe:2.3:a:microsoft:azure_monitor_agent:1.33.1
Microsoft » Azure Monitor Agent » Version: 1.33.4

cpe:2.3:a:microsoft:azure_monitor_agent:1.33.4
Microsoft » Azure Monitor Agent » Version: 1.34.0

cpe:2.3:a:microsoft:azure_monitor_agent:1.34.0
Microsoft » Azure Monitor Agent » Version: 1.34.5

cpe:2.3:a:microsoft:azure_monitor_agent:1.34.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-47988

Products

Pricing

Contact Us