Microsoft Azure Health Bot — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Azure Health Bot, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-38109 — CVSS 9.1 (critical): An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate…
• CVE-2025-21384 — CVSS 8.3 (high): An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate…