CVE-2025-62207

HighCVSS 8.6

Published: 20/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.71%

53th percentile - higher than 53% of all known CVEs

Summary

An elevation of privilege vulnerability in Azure Monitor. Technical details are not provided in the description.

Risk Assessment

An attacker could exploit the vulnerability to gain higher privileges in the Azure environment, potentially leading to unauthorized access to resources and data. This requires some level of access to the service.

Recommendation

Apply the security updates provided by Microsoft for Azure Monitor. Review and restrict Azure account permissions following the principle of least privilege.

Other vulnerabilities in Azure Monitor

CVE-2025-55321Critical
A Cross-site Scripting (XSS) vulnerability in Azure Monitor stems from improper neutralization of input during web page generation. It allows an unauthorized attacker to perform spoofing over a network.

Original NVD description (English source)

Azure Monitor Elevation of Privilege Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS