NetSight
IP …
medium6.8

CVE-2025-55320

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevat…

Impact

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.

Affected products

VendorProductAffected versions
MicrosoftConfiguration Manager 2403
before 5.00.9128.1035
MicrosoftConfiguration Manager 2409
before 5.00.9132.1029
MicrosoftConfiguration Manager 2503
before 5.00.9135.1008

Weakness classification

CWE-89

References