CNNVD-202512-3324 Information

CNNVD ID

CNNVD-202512-3324

CVE-2025-64675

  • CNNVD Published: 2025-12-18

Description (Chinese)

Microsoft Azure Cosmos DB是美国微软(Microsoft)公司的一个分布式多模型数据库。 Microsoft Azure Cosmos DB存在跨站脚本漏洞,该漏洞源于输入中和不当,可能导致网络欺骗攻击。

Description (English)

Microsoft Azure Cosmos DB is a distributed multi-model database of Microsoft (MSC) in the United States. Microsoft Azure Cosmos DB has a cross-site script loophole, which stems from inappropriate input and may lead to cyber-fraud attacks.

Hazard Level

Medium

Vulnerability Type

跨站脚本

Affected Vendor

微软

Published

2025-12-18

Last Modified

2026-02-24

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64675

Patch

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64675

Share on: