CVE-2025-55321

CWE-79 — Cross-site Scripting (XSS)4 documents4 sources
Severity
5.4MEDIUM
EPSS
0.1%
top 82.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Azure Monitor
Timeline
PublishedOct 9
Latest updateOct 14

Description

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an unauthorized attacker to perform spoofing over a network.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:NExploitability: 2.8 | Impact: 5.8

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-96rv-gm93-8wx5: Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an authorized attacker to perform spoofin↗2025-10-09
▶
CVEList
Azure Monitor Log Analytics Spoofing Vulnerability↗2025-10-09
▶

📋Vendor Advisories

1
Microsoft
Azure Monitor Log Analytics Spoofing Vulnerability↗2025-10-14
▶
CVE-2025-55321 (MEDIUM CVSS 5.4) | Improper neutralization of input du | cvebase.io