CM
Product
Configuration Manager 2503
On CISA KEVExploited in the wild
8
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 4Medium 3Low 0
Watch
Add Configuration Manager 2503 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43468 In wildKEV | 9.8 | Oct 8 | Microsoft Configuration Manager Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-88075 | 8.8 | Oct 13 | Configuration Manager Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2026-47301 | 8.8 | Jul 14 | Configuration Manager Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2025-59213 | 8.8 | Oct 14 | Configuration Manager Elevation of Privilege Vulnerability Affected: before 5.00.9135.1008 |
| CVE-2025-47178 | 8.0 | Jul 8 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to execute code over an… Affected: before 5.00.9135.1003 |
| CVE-2025-55320 | 6.8 | Oct 14 | Configuration Manager Elevation of Privilege Vulnerability Affected: before 5.00.9135.1008 |
| CVE-2025-47179 | 6.7 | Nov 11 | Configuration Manager Elevation of Privilege Vulnerability Affected: before 5.0.9135.1013 |
| CVE-2025-59501 | 4.8 | Oct 31 | Microsoft Configuration Manager Spoofing Vulnerability Affected: before 5.0.9135.1013 |
Showing 8
