CVE-2025-55320
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.
| Software | From | Fixed in |
|---|---|---|
| microsoft / configuration_manager_2403 | - | 5.00.9128.1035 |
| microsoft / configuration_manager_2409 | - | 5.00.9132.1029 |
| microsoft / configuration_manager_2503 | - | 5.00.9135.1008 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime