Azure App Service On Azure Stack
Vendor:
First CVE: Nov 14, 2018 · Active for 7 years
4
Total CVEs
More Total CVEs than 75% of tracked products
1.0
Avg CVEs / Year
Bottom 1%
7.6
Avg CVSS
Higher Avg CVSS than 63% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Azure App Service On Azure Stack over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 14, 2018
7 years ago
Most Recent CVE
Aug 12, 2025
350 days ago
CVE Severity & Scoring
Azure App Service On Azure Stack4 CVEs
50%
25%
25%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (50.0%)
Network2 (50.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None3 (75.0%)
Unknown0 (0.0%)
Required1 (25.0%)
Privileges Required
Low2 (50.0%)
High0 (0.0%)
None2 (50.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-1372CRITICAL An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who suc | Oct 10, 2019 | 10.0 | 41 | NO | NO |
CVE-2023-21777HIGH Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability | Feb 14, 2023 | 8.7 | 26 | NO | NO |
CVE-2018-8600MEDIUM A Cross-site Scripting (XSS) vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input, aka "Azure App Service Cross-site Scripting | Nov 14, 2018 | 6.1 | 22 | NO | NO |
CVE-2025-53765MEDIUM Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally. | Aug 12, 2025 | 5.5 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (4 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (4 CVEs).
Media Mentions
Signals from CVEs in this product scope (4 CVEs).
Top CNAs Publishing CVEs For Azure App Service On Azure Stack
Top CWEs
Versions
No cataloged versions.