CVE-2025-55320

CVE-2025-55320CVE-2025-55320

microsoft / configuration_manager_2403

Description

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.

Scoring

CVSS 6.8 ()
VectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Last modified2026-10-18
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.