Microsoft Azure Stack Hub

Name: Microsoft Azure Stack Hub
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical1high8medium0low

updated 2026-10-27

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-38647US	high7.5OT critical	99.9% (100th)	KEV	Monitor, Update and Config Mgmnt 1.14.01	2021-09-15	1.0.0 → Monitor, Update and Config Mgmnt 1.14.01
CVE-2021-38648US	medium4.6OT critical	11.4% (96th)	KEV	Monitor, Update and Config Mgmnt 1.14.01	2021-09-15	1.0.0 → Monitor, Update and Config Mgmnt 1.14.01
CVE-2021-38649US	medium4.6OT critical	2.89% (87th)	KEV	Monitor, Update and Config Mgmnt 1.14.01	2021-09-15	1.0.0 → Monitor, Update and Config Mgmnt 1.14.01
CVE-2021-38645US	medium4.6OT critical	2.73% (86th)	KEV	Monitor, Update and Config Mgmnt 1.14.01	2021-09-15	1.0.0 → Monitor, Update and Config Mgmnt 1.14.01
CVE-2025-53793US	—	1.35% (71st)	—	no fix	2025-08-12	6 versions
CVE-2024-20679US	medium6.5	1.33% (71st)	—	1.2311.1.22	2024-02-13	1.0.0 → 1.2311.1.22
CVE-2024-38108US	—	1.21% (68th)	—	1.2311.1.22	2024-08-13	1.0.0 → 1.2311.1.22
CVE-2025-53781US	medium6.5	1.19% (68th)	—	no fix	2025-08-12	6 versions
CVE-2025-53767US	—	1.12% (66th)	—	no fix	2025-08-07	6 versions
CVE-2024-38220US	—	1.03% (64th)	—	1.2406.1.15	2024-09-10	1.0.0 → 1.2406.1.15
CVE-2024-38216US	critical9.0	0.92% (60th)	—	1.2406.1.15	2024-09-10	1.0.0 → 1.2406.1.15
CVE-2022-29149US	medium4.6	0.92% (60th)	—	OMS Agent for Linux GA v1.14.13	2022-06-15	1.0.0 → OMS Agent for Linux GA v1.14.13
CVE-2025-53792US	—	0.82% (57th)	—	no fix	2025-08-07	6 versions
CVE-2024-38201US	—	0.65% (51st)	—	1.2311.1.22	2024-08-13	1.0.0 → 1.2311.1.22
CVE-2025-53765US	medium5.5	0.49% (42nd)	—	102.10.2.11	2025-08-12	7 versions
CVE-2025-49707US	medium5.5	0.45% (39th)	—	no fix	2025-08-12	6 versions
CVE-2025-53729US	—	0.30% (22nd)	—	no fix	2025-08-12	6 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-2644 CVEs
CWE-269Improper Privilege Management3 CVEs
CWE-284Improper Access Control3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-285Improper Authorization1 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)11 CVEs
NLNCSC-NL (CSAF)7 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan