CVE-2023-36871
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
A vulnerability in Azure Active Directory allows for a security feature bypass, potentially leading to unauthorized access to resources.
Risk Assessment
Organizations may be exposed to unauthorized actions within their systems, potentially resulting in data loss or privacy breaches.
Recommendation
It is recommended to update the system to the latest version and review security policies to minimize risk.
Other vulnerabilities in Azure Active Directory
See all- CVE-2026-69851Critical
Server-side request forgery (SSRF) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
- CVE-2026-50481Critical
Modification of assumed-immutable data (MAID) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
- CVE-2026-45480Critical
Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-50653High
An infinite loop in Azure Active Directory allows an unauthorized attacker to deny service over a network.
- CVE-2026-50652High
In Azure Active Directory, a deserialization of untrusted data vulnerability allows an unauthorized attacker to perform a denial of service (DoS) attack over the network.
Original NVD description (English source)
Azure Active Directory Security Feature Bypass Vulnerability