NetSight
IP …
high8.8

CVE-2025-59213

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elev…

Impact

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network.

Affected products

VendorProductAffected versions
MicrosoftConfiguration Manager 2403
before 5.00.9128.1035
MicrosoftConfiguration Manager 2409
before 5.00.9132.1029
MicrosoftConfiguration Manager 2503
before 5.00.9135.1008

Weakness classification

CWE-89

References