Microsoft Azure Cosmos DB Cross-Site Scripting Vulnerability Allowing Spoofing
Vulnerability
A cross-site scripting vulnerability has been identified in Microsoft Azure Cosmos DB. This issue arises from improper input neutralization during web page generation, allowing an unauthorized attacker to perform spoofing over the network. The vulnerability affects all versions of Azure Cosmos DB.
Impact
Exploitation of this vulnerability could lead to spoofing attacks, allowing an attacker to impersonate another user or entity.
Added: Dec 19, 2025, 12:17 AM
Updated: Dec 19, 2025, 12:17 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.3exploitability
6.4remediation
0.0relevance
1.6threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.