Microsoft Azure Web Apps
productDEcpe:/a:microsoft:azure:web_apps
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
by severity
6critical5high1medium0low
updated 2026-10-27
01
vulnerabilities (26)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2024-43469US | — | — |
| CVE-2024-38194US | critical9.9 | — |
| CVE-2026-65770US | — | — |
| CVE-2024-38220US | — | — |
| CVE-2026-69519US | — | — |
| CVE-2026-68789US | — | — |
| CVE-2026-68782US | — | — |
| CVE-2026-65816US | — | — |
| CVE-2026-66800US | high7.5 | — |
| CVE-2026-69400US | — | — |
| CVE-2024-38216US | critical9.0 | — |
| CVE-2026-32213US | critical9.8OT elevated | — |
| CVE-2026-32173US | high7.5OT elevated | — |
| CVE-2026-66309US | — | — |
| CVE-2024-43470US | — | — |
| CVE-2026-69855US | medium6.5 | — |
| CVE-2026-32211US | high7.5OT elevated | — |
| CVE-2026-69502US | — | — |
| CVE-2026-69555US | —OT elevated | — |
| CVE-2026-69419US | high8.8 | — |
| CVE-2026-33105US | critical9.8OT elevated | — |
| CVE-2026-33107US | critical9.8 | — |
| CVE-2026-26135US | high8.8 | — |
| CVE-2024-38188US | — | — |
| CVE-2026-69543US | — | — |
| CVE-2026-62834US | critical9.8 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-918Server-Side Request Forgery (SSRF)6 CVEs
- CWE-863Incorrect Authorization4 CVEs
- CWE-20Improper Input Validation2 CVEs
- CWE-284Improper Access Control2 CVEs
- CWE-285Improper Authorization2 CVEs
- CWE-59Improper Link Resolution Before File Access ('Link Following')2 CVEs
- CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
- CWE-190Integer Overflow or Wraparound1 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)26 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan