Microsoft Azure Stack Hub — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Azure Stack Hub, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2021-38647 — CVSS 9.8 (critical) — actively exploited: Open Management Infrastructure Remote Code Execution Vulnerability
• CVE-2024-38108 — CVSS 9.3 (critical): Azure Stack Hub Spoofing Vulnerability
• CVE-2024-38220 — CVSS 9.0 (critical): Azure Stack Hub Elevation of Privilege Vulnerability
• CVE-2024-38216 — CVSS 8.2 (high): Azure Stack Hub Elevation of Privilege Vulnerability
• CVE-2021-38645 — CVSS 7.8 (high) — actively exploited: Open Management Infrastructure Elevation of Privilege Vulnerability
• CVE-2021-38648 — CVSS 7.8 (high) — actively exploited: Open Management Infrastructure Elevation of Privilege Vulnerability
• CVE-2022-29149 — CVSS 7.8 (high): Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
• CVE-2025-53793 — CVSS 7.5 (high): Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.
• CVE-2024-38201 — CVSS 7.0 (high): Azure Stack Hub Elevation of Privilege Vulnerability
• CVE-2021-38649 — CVSS 7.0 (high) — actively exploited: Open Management Infrastructure Elevation of Privilege Vulnerability
• CVE-2024-20679 — CVSS 6.5 (medium): Azure Stack Hub Spoofing Vulnerability