Sriharsha Pallekonda

**Name of the Vulnerable Software and Affected Versions** Azure Entra ID (affected versions not specified) **Description** Improper privilege management allows an unauthorized attacker to elevate privileges over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Bing (affected versions not specified) **Description** A Server-Side Request Forgery (SSRF) issue exists within Bing's search infrastructure. This could allow attackers to pivot into Microsoft's internal networks. The vulnerability involves crafting specific requests to exploit the SSRF condition. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions Azure Web Apps (affected versions not specified) Description An issue exists in Azure MCP Server where missing authentication for a critical function allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Data Factory (affected versions not specified) **Description** An issue exists in Azure Data Factory that allows an unauthorized attacker to disclose sensitive information over a network. The exposure of this information could potentially lead to further compromise. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Front Door (affected versions not specified) **Description** An elevation of privilege issue exists in Azure Front Door. This allows for unauthorized access and potential compromise of resources. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Front Door (affected versions not specified) **Description** Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network. The issue allows an attacker to gain elevated privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.