CVE-2023-23382
MediumCVSS 6.5Exploitation Probability (EPSS)
High risk87th percentile - higher than 87% of all known CVEs
Summary
An information disclosure vulnerability in Azure Machine Learning Compute Instance. An attacker could exploit this to gain unauthorized access to data.
Risk Assessment
Risk of sensitive data leakage in the Azure Machine Learning environment, potentially compromising organizational confidentiality.
Recommendation
Install the security update provided by Microsoft for Azure Machine Learning that addresses the information disclosure vulnerability.
Other vulnerabilities in Azure Machine Learning
See all- CVE-2026-32207High
Azure Machine Learning has an improper neutralization of input during web page generation, leading to a cross-site scripting (XSS) vulnerability. This allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-33833High
Improper neutralization of special elements in output used by a downstream component in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.
Original NVD description (English source)
Azure Machine Learning Compute Instance Information Disclosure Vulnerability