Microsoft Azure Machine Learning Cross-Site Scripting Vulnerability Allowing Spoofing

Vulnerability

A cross-site scripting vulnerability has been identified in Azure Machine Learning, specifically in the Notebook feature. This issue allows an unauthorized attacker to perform spoofing over the network by improperly neutralizing input during web page generation. The vulnerability affects several versions of Azure Machine Learning.

Impact

Exploitation of this vulnerability could lead to unauthorized spoofing activities over the network, potentially allowing attackers to impersonate users or services.

Added: May 7, 2026, 10:29 PM
Updated: May 7, 2026, 10:29 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
1.7
exploitability
4.2
remediation
0.0
relevance
7.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.