Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Microsoft
Azure Stack Hub

Microsoft Azure Stack Hub Vulnerabilities: CVEs, CISA KEV & Security Advisories

12 CVEs

4 in CISA KEV

Microsoft Azure Stack Hub Vulnerabilities

CVE security advisories and vulnerability history for Azure Stack Hub by Microsoft.

12

Total CVEs

Published

4

In CISA KEV

Exploited in the wild

4

Public exploits

With known exploit

7.7

Avg CVSS

2021–2025

Last updated August 12, 2025

Overview

Microsoft Azure Stack Hub has 12 published CVE records since 2021, of which 4 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 7.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Microsoft Azure Stack Hub, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include Unknown.

Severity and exploitation

How the CVSS severity of Microsoft Azure Stack Hub's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High7

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

4

4 of Microsoft Azure Stack Hub's CVEs are confirmed exploited in the wild.

Public exploits

4

4 of Microsoft Azure Stack Hub's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Microsoft Azure Stack Hub version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

1.2311.1.225 CVEs
3.1.1354 CVEs
Monitor, Update and Config Mgmnt 1.14.014 CVEs
1.2406.1.152 CVEs
1.14.131 CVE
1.2406.1.231 CVE
1.2408.1.501 CVE
1.2501.1.471 CVE
102.10.2.111 CVE
OMS Agent for Linux GA v1.14.131 CVE

Find a version

12 CVEs

Sort

Azure Stack Hub Information Disclosure Vulnerability
CVE-2025-53793
Patch
CWE-22
High · CVSS 7.5
EPSS 1.4% (81th pct)2025-08-12
Azure Stack Hub Information Disclosure Vulnerability
CVE-2025-53765
Patch
CWE-359
Medium · CVSS 4.4
EPSS 0.6% (70th pct)2025-08-12
Critical vulnerability · 2024-09-10
CVE-2024-38220
Patch
CWE-284
Critical · CVSS 9.0
EPSS 1.0% (77th pct)2024-09-10
High vulnerability · 2024-09-10
CVE-2024-38216
Patch
CWE-20
High · CVSS 8.2
EPSS 1.5% (81th pct)2024-09-10
High vulnerability · 2024-08-13
CVE-2024-38201
Patch
CWE-20
High · CVSS 7.0
EPSS 1.0% (78th pct)2024-08-13
Azure Stack Hub Spoofing Vulnerability
CVE-2024-38108
Patch
CWE-79
Critical · CVSS 9.3
EPSS 1.1% (79th pct)2024-08-13
Medium vulnerability · 2024-02-13
CVE-2024-20679
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.5% (68th pct)2024-02-13
High vulnerability · 2022-06-15
CVE-2022-29149
Patch
High · CVSS 7.8
EPSS 0.2% (43th pct)2022-06-15
Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38649
CISA KEV
Public exploit
Patch
Added to CISA KEV 2021-11-03
High · CVSS 7.3
EPSS 6.7% (91th pct)2021-09-15
Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38648
CISA KEV
Public exploit
Patch
Added to CISA KEV 2021-11-03
High · CVSS 8.5
EPSS 38.2% (97th pct)2021-09-15
Open Management Infrastructure Remote Code Execution Vulnerability
CVE-2021-38647
CISA KEV
Public exploit
Patch
Added to CISA KEV 2021-11-03
Critical · CVSS 9.3
EPSS 94.4% (100th pct)2021-09-15
Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38645
CISA KEV
Public exploit
Patch
Added to CISA KEV 2021-11-03
High · CVSS 7.8
EPSS 11.6% (94th pct)2021-09-15

Common weakness types

The CWE weakness categories most often found in Microsoft Azure Stack Hub CVEs. Follow any weakness for its full explanation.

CWE-20Improper Input Validation2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVE
CWE-284Improper Access Control1 CVE
CWE-359Exposure of Private Personal Information to an Unauthorized Actor1 CVE

Disclosure activity by year

How many Microsoft Azure Stack Hub CVEs were published each year.

2021

4

2022

1

2024

5

2025

2

Other Microsoft products

Browse vulnerabilities for other products by Microsoft.

windows10,259 CVEs windows server 20165,207 CVEs windows server 20194,709 CVEs windows 104,437 CVEs windows server 20124,219 CVEs windows server 20084,083 CVEs Windows Server 2019 (Server Core installation)3,456 CVEs Windows 10 Version 18093,187 CVEs

All Microsoft vulnerabilities

Frequently asked questions

Common questions about Microsoft Azure Stack Hub vulnerabilities.

How many CVEs does Microsoft Azure Stack Hub have?

Microsoft Azure Stack Hub has 12 published CVE records since 2021.

How many Microsoft Azure Stack Hub CVEs are in CISA KEV?

Yes — 4 of Microsoft Azure Stack Hub's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for Microsoft Azure Stack Hub vulnerabilities?

Yes — 4 of Microsoft Azure Stack Hub's CVEs have a known public exploit.

Which versions of Microsoft Azure Stack Hub are affected?

10 distinct Microsoft Azure Stack Hub versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Microsoft Azure Stack Hub CVEs?

Microsoft Azure Stack Hub's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-284 (Improper Access Control).

How many critical Microsoft Azure Stack Hub vulnerabilities are there?

Microsoft Azure Stack Hub has 3 critical and 7 high-severity CVEs.

What is the average severity of Microsoft Azure Stack Hub CVEs?

The average CVSS base score across Microsoft Azure Stack Hub's scored CVEs is 7.7.

References

All Microsoft vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Microsoft Azure Stack Hub vulnerabilities

Monitor new Microsoft Azure Stack Hub vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References