CVE-2025-21385

HIGH 8.8EPSS 24.4%

A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a network.

CVSS v3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 24.44% chance of exploitation in the next 30 days, 98th percentile
Published: 2025-01-09
Updated: 2026-06-09

Proof-of-concept exploits (1)

Pauloxc6/CVE-2025-213852★ · 2025-01-16

References

Related