CM
Product
Configuration Manager 2503
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wild
8
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 4Medium 3Low 0
Watch

Add Configuration Manager 2503 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-43468
In wildKEV
9.8
81%
Oct 8
Microsoft Configuration Manager Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-88075
8.8
1%
Oct 13
Configuration Manager Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2026-47301
8.8
1%
Jul 14
Configuration Manager Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2025-59213
8.8
0%
Oct 14
Configuration Manager Elevation of Privilege Vulnerability
Affected: before 5.00.9135.1008
CVE-2025-47178
8.0
3%
Jul 8
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to execute code over an…
Affected: before 5.00.9135.1003
CVE-2025-55320
6.8
1%
Oct 14
Configuration Manager Elevation of Privilege Vulnerability
Affected: before 5.00.9135.1008
CVE-2025-47179
6.7
0%
Nov 11
Configuration Manager Elevation of Privilege Vulnerability
Affected: before 5.0.9135.1013
CVE-2025-59501
4.8
3%
Oct 31
Microsoft Configuration Manager Spoofing Vulnerability
Affected: before 5.0.9135.1013
Showing 8