high7.5
CVE-2025-47988
Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network.
Impact
Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Azure Monitor Agent | before 1.35.1 |