CVE-2025-55321

CriticalCVSS 9.3

Published: 09/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

37th percentile - higher than 37% of all known CVEs

Summary

A Cross-site Scripting (XSS) vulnerability in Azure Monitor stems from improper neutralization of input during web page generation. It allows an unauthorized attacker to perform spoofing over a network.

Risk Assessment

An attacker could impersonate a trusted Azure Monitor interface, potentially leading to credential theft or user deception.

Recommendation

Apply available security updates for Azure Monitor and implement XSS protections such as Content Security Policy.

Other vulnerabilities in Azure Monitor

CVE-2025-62207High
An elevation of privilege vulnerability in Azure Monitor. Technical details are not provided in the description.

Original NVD description (English source)

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an unauthorized attacker to perform spoofing over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS