Product:
Microsoft Purview
Summary
Microsoft Purview has a vulnerability that allows an authorized attacker to execute code over a network. This can lead to significant impacts on confidentiality, integrity, and availability. The vulnerability is classified as high severity due to the potential for exploitation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.2 | CVE-2025-64676 |
Exploitation
To exploit this vulnerability, an attacker must have authorized access to the system. Once access is gained, the attacker can leverage the vulnerability to execute arbitrary code over the network, potentially compromising sensitive data and system integrity.
Affected Products
- Microsoft Purview: A cloud-based data governance solution that helps organizations manage and protect their data assets.
Mitigation
To mitigate this vulnerability, it is essential to apply the latest security updates provided by Microsoft. Organizations should also review their access controls and ensure that only authorized users have access to sensitive systems.