Azure Cosmos DB vulnerabilities

2 known vulnerabilities in Azure Cosmos DB from Microsoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  Azure Cosmos DB: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-87701Sep 17, 2026Microsoft

  Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.

• 9.6 Critical severity

  Azure Cosmos DB: Improper Neutralization of Input During Web Page Generation

  CVE-2025-64675Dec 19, 2025Microsoft

  Improper neutralization of input during web page generation ('cross-site scripting') in Azure Cosmos DB allows an unauthorized attacker to perform spoofing over a network.