microsoft azure site recovery
productUScpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
critical
by severity
0critical1high17medium0low
updated 2026-10-28
01
vulnerabilities (37)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2022-24515US | medium6.5 | — |
| CVE-2022-24519US | medium4.0 | — |
| CVE-2022-24518US | medium4.0 | — |
| CVE-2022-24506US | medium4.0 | — |
| CVE-2022-24469US | high9.0 | — |
| CVE-2022-26897US | medium4.0 | — |
| CVE-2022-26896US | medium4.0 | — |
| CVE-2022-35824US | — | — |
| CVE-2022-24520US | medium6.5 | — |
| CVE-2022-24517US | medium6.5 | — |
| CVE-2022-24471US | medium6.5 | — |
| CVE-2022-24470US | medium6.5 | — |
| CVE-2022-24468US | medium6.5 | — |
| CVE-2022-24467US | medium6.5 | — |
| CVE-2022-33678US | medium6.5 | — |
| CVE-2022-33676US | medium6.5 | — |
| CVE-2022-33677US | medium6.5 | — |
| CVE-2022-35812US | — | — |
| CVE-2022-35800US | — | — |
| CVE-2022-26898US | medium6.5 | — |
| CVE-2022-35802US | — | — |
| CVE-2022-35819US | — | — |
| CVE-2022-35818US | — | — |
| CVE-2022-35817US | — | — |
| CVE-2022-35816US | — | — |
| CVE-2022-35815US | — | — |
| CVE-2022-35814US | — | — |
| CVE-2022-35813US | — | — |
| CVE-2022-35811US | — | — |
| CVE-2022-35810US | — | — |
| CVE-2022-35809US | — | — |
| CVE-2022-35808US | — | — |
| CVE-2022-35807US | — | — |
| CVE-2022-35801US | — | — |
| CVE-2022-35799US | — | — |
| CVE-2022-30181US | medium5.5 | — |
| CVE-2024-21364US | — | — |
02
weaknesses (7)
The flaw types (CWEs) most of these CVEs share.
- CWE-264CWE-26420 CVEs
- CWE-94Improper Control of Generation of Code ('Code Injection')6 CVEs
- CWE-522Insufficiently Protected Credentials5 CVEs
- CWE-20Improper Input Validation4 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
- CWE-269Improper Privilege Management1 CVEs
- CWE-284Improper Access Control1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE37 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan