CVE Catalog
CVE-2025-59500
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk0.55%
44th percentile - higher than 44% of all known CVEs
Summary
Azure Notification Service has an improper access control vulnerability that allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An authorized attacker could remotely gain higher privileges in the service, potentially leading to unauthorized operations or data breaches.
Recommendation
Update Azure Notification Service to the latest version with the fix. Monitor access logs and restrict network permissions.
Other vulnerabilities in Azure Notification Service
Original NVD description (English source)
Improper access control in Azure Notification Service allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS