Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Priority MEDIUM 50

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.006 Published 2026-09-17 No fix listed CWE-22
Priority MEDIUM 49

Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00442 Published 2026-09-17 No fix listed CWE-284
Priority MEDIUM 45

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00939 Published 2026-08-20 No fix listed CWE-22
Priority MEDIUM 42

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00689 Published 2026-08-06 No fix listed CWE-284
Priority MEDIUM 44

Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00601 Published 2026-05-12 No fix listed CWE-284
Priority MEDIUM 40

Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0044 Published 2026-04-14 No fix listed CWE-522
Priority MEDIUM 49

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00573 Published 2026-01-22 No fix listed CWE-22