Microsoft Purview Server-Side Request Forgery Vulnerability Allowing Privilege Escalation
Vulnerability
A server-side request forgery (SSRF) vulnerability has been identified in Microsoft Purview eDiscovery. This vulnerability allows an unauthorized attacker to elevate privileges over a network. It affects several different versions and has a critical impact, as it allows for unauthorized privilege escalation.
Impact
Exploitation of this vulnerability could lead to unauthorized privilege escalation within the application.
Added: Apr 23, 2026, 11:12 PM
Updated: Apr 23, 2026, 11:12 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
6.8remediation
0.0relevance
6.5threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.