CVE-2022-23256

FAUCET Score

CVE-2022-23256 is an Azure Data Explorer Spoofing Vulnerability affecting Microsoft Azure Data Explorer. This medium-severity vulnerability (CVSS 4.3) can be exploited remotely with low complexity, requiring user interaction, and primarily impacts integrity. While not actively exploited or on the KEV catalog, and lacking public exploit code, it has received limited community discussion and media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		Range not provided by sourceCPE matchmatch criteria	cpe:2.3:a:microsoft:azure_data_explorer:-:::::::*

CVSS Data

CVSS version used by this source: 3.1

8.1HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

Exploitability Score

2.8

Impact Score

5.2

CvssVersion

3.1

Exploit Intelligence

EPSS Score

1.56%

Probability of exploitation in next 30 days

EPSS Percentile

72.6%

Percentile rank of EPSS score among Peer Group

As of 2026-07-26

Model: v2026.06.15

This CVE's current EPSS score of 0.0156 is in the 85th percentile among its peer group of 26,219 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

microsoftpatch availablevia nvd_reference

View patch

Vendor Advisories (1)

microsoft2022-Feb/CVE-2022-23256Important

Azure Data Explorer Spoofing Vulnerability

Feb 8, 2022

References

portal.msrc.microsoft.com / en-US/security-guidance/advisory/CVE-2022-23256

PatchVendor Advisory

msrc.microsoft.com / update-guide/vulnerability/CVE-2022-23256