CVE-2025-55320

Publication date

2025-10-14 17:00:12

Family

microsoft

State

PUBLISHED

Description

Improper neutralization of special elements used in an sql command (sql injection) in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.