Microsoft On-prem Data Gateway — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft On-prem Data Gateway, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-36021 — CVSS 8.0 (high): Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability
• CVE-2025-21403 — CVSS 6.4 (medium): On-Premises Data Gateway Information Disclosure Vulnerability