Search criteria

3 vulnerabilities found for system_center_virtual_machine_manager by microsoft

FKIE_CVE-2025-27743

Vulnerability from fkie_nvd - Published: 2025-04-08 18:16 - Updated: 2025-07-10 15:13

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_data_protection_manager:2019:-:*:*:*:*:*:*",
              "matchCriteriaId": "AFF85EC5-092E-439F-9336-087A8080EF29",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_data_protection_manager:2022:-:*:*:*:*:*:*",
              "matchCriteriaId": "88CFD239-E870-46DB-B77A-EFBC46A09BE3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_data_protection_manager:2025:-:*:*:*:*:*:*",
              "matchCriteriaId": "50724A4D-AD79-41AB-8FE9-21091D0D5CB0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2019:-:*:*:*:*:*:*",
              "matchCriteriaId": "0BFD64D6-E8BB-4606-8D4C-EAE586CAD791",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2022:-:*:*:*:*:*:*",
              "matchCriteriaId": "ABD632BE-513E-4581-9C8C-3A13DA1ADF1F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:2025:-:*:*:*:*:*:*",
              "matchCriteriaId": "0507AA0D-CBD5-400D-B24C-0549778F6029",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_orchestrator:2019:-:*:*:*:*:*:*",
              "matchCriteriaId": "B5E458FC-BB19-4AC4-B94D-A5A9F25D723F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_orchestrator:2022:-:*:*:*:*:*:*",
              "matchCriteriaId": "25E6F797-067D-4372-B3BC-3F77FD2986FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_orchestrator:2025:-:*:*:*:*:*:*",
              "matchCriteriaId": "1A19BFD4-DAD8-4B0E-AF63-78590ACEC48E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_service_manager:2019:-:*:*:*:*:*:*",
              "matchCriteriaId": "17E46BD1-95BB-490C-A1F7-300DF80B119D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_service_manager:2022:-:*:*:*:*:*:*",
              "matchCriteriaId": "E9F69A12-E14C-4111-9B6F-D319128D081F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_service_manager:2025:-:*:*:*:*:*:*",
              "matchCriteriaId": "C8B3216B-3457-4EDA-9C2D-B52CCEB2E15A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_virtual_machine_manager:2019:-:*:*:*:*:*:*",
              "matchCriteriaId": "A5F1977C-D2A3-4CD9-A2EB-62F0C56B8F6F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_virtual_machine_manager:2022:-:*:*:*:*:*:*",
              "matchCriteriaId": "51480EB4-2477-4D86-9724-4CA5FEFC76FB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:system_center_virtual_machine_manager:2025:-:*:*:*:*:*:*",
              "matchCriteriaId": "BD13CFAE-ED86-4DFB-B90E-5FF2B162BB4A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Untrusted search path in System Center allows an authorized attacker to elevate privileges locally."
    },
    {
      "lang": "es",
      "value": "La ruta de b\u00fasqueda no confiable en System Center permite que un atacante autorizado eleve privilegios localmente."
    }
  ],
  "id": "CVE-2025-27743",
  "lastModified": "2025-07-10T15:13:40.693",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "secure@microsoft.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2025-04-08T18:16:03.260",
  "references": [
    {
      "source": "secure@microsoft.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27743"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-426"
        }
      ],
      "source": "secure@microsoft.com",
      "type": "Primary"
    }
  ]
}

CVE-2025-27743 (GCVE-0-2025-27743)

Vulnerability from cvelistv5 – Published: 2025-04-08 17:23 – Updated: 2025-06-04 17:52
VLAI?
Summary
Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.
CWE
Assigner
References
Impacted products
Vendor Product Version
Microsoft System Center Virtual Machine Manager 2022 Affected: N/A
Create a notification for this product.
    Microsoft System Center Virtual Machine Manager 2019 Affected: N/A
Create a notification for this product.
    Microsoft System Center Virtual Machine Manager 2025 Affected: N/A
Create a notification for this product.
    Microsoft System Center Data Protection Manager 2025 Affected: N/A
Create a notification for this product.
    Microsoft System Center Data Protection Manager 2022 Affected: N/A
Create a notification for this product.
    Microsoft System Center Data Protection Manager 2019 Affected: N/A
Create a notification for this product.
    Microsoft System Center Orchestrator 2019 Affected: N/A
Create a notification for this product.
    Microsoft System Center Orchestrator 2022 Affected: N/A
Create a notification for this product.
    Microsoft System Center Orchestrator 2025 Affected: N/A
Create a notification for this product.
    Microsoft System Center Service Manager 2019 Affected: N/A
Create a notification for this product.
    Microsoft System Center Service Manager 2022 Affected: N/A
Create a notification for this product.
    Microsoft System Center Service Manager 2025 Affected: N/A
Create a notification for this product.
    Microsoft System Center Operations Manager 2019 Affected: N/A
Create a notification for this product.
    Microsoft System Center Operations Manager 2022 Affected: N/A
Create a notification for this product.
    Microsoft System Center Operations Manager 2025 Affected: N/A
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-27743",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-08T19:57:39.876585Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-08T19:57:50.616Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Virtual Machine Manager 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Virtual Machine Manager 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Virtual Machine Manager 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Data Protection Manager 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Data Protection Manager 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Data Protection Manager 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Orchestrator 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Orchestrator 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Orchestrator 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Service Manager 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Service Manager 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Service Manager 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Operations Manager 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Operations Manager 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Operations Manager 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_virtual_machine_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_virtual_machine_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_virtual_machine_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_data_protection_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_data_protection_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_data_protection_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_orchestrator:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_orchestrator:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_orchestrator:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_service_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_service_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_service_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:*:-:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:*:-:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:*:-:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-04-08T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Untrusted search path in System Center allows an authorized attacker to elevate privileges locally."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426: Untrusted Search Path",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-04T17:52:40.439Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft System Center Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27743"
        }
      ],
      "title": "Microsoft System Center Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-27743",
    "datePublished": "2025-04-08T17:23:25.628Z",
    "dateReserved": "2025-03-06T04:26:08.553Z",
    "dateUpdated": "2025-06-04T17:52:40.439Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-27743 (GCVE-0-2025-27743)

Vulnerability from nvd – Published: 2025-04-08 17:23 – Updated: 2025-06-04 17:52
VLAI?
Summary
Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.
CWE
Assigner
References
Impacted products
Vendor Product Version
Microsoft System Center Virtual Machine Manager 2022 Affected: N/A
Create a notification for this product.
    Microsoft System Center Virtual Machine Manager 2019 Affected: N/A
Create a notification for this product.
    Microsoft System Center Virtual Machine Manager 2025 Affected: N/A
Create a notification for this product.
    Microsoft System Center Data Protection Manager 2025 Affected: N/A
Create a notification for this product.
    Microsoft System Center Data Protection Manager 2022 Affected: N/A
Create a notification for this product.
    Microsoft System Center Data Protection Manager 2019 Affected: N/A
Create a notification for this product.
    Microsoft System Center Orchestrator 2019 Affected: N/A
Create a notification for this product.
    Microsoft System Center Orchestrator 2022 Affected: N/A
Create a notification for this product.
    Microsoft System Center Orchestrator 2025 Affected: N/A
Create a notification for this product.
    Microsoft System Center Service Manager 2019 Affected: N/A
Create a notification for this product.
    Microsoft System Center Service Manager 2022 Affected: N/A
Create a notification for this product.
    Microsoft System Center Service Manager 2025 Affected: N/A
Create a notification for this product.
    Microsoft System Center Operations Manager 2019 Affected: N/A
Create a notification for this product.
    Microsoft System Center Operations Manager 2022 Affected: N/A
Create a notification for this product.
    Microsoft System Center Operations Manager 2025 Affected: N/A
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-27743",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-08T19:57:39.876585Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-08T19:57:50.616Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Virtual Machine Manager 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Virtual Machine Manager 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Virtual Machine Manager 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Data Protection Manager 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Data Protection Manager 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Data Protection Manager 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Orchestrator 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Orchestrator 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Orchestrator 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Service Manager 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Service Manager 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Service Manager 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Operations Manager 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Operations Manager 2022",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "System Center Operations Manager 2025",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "N/A"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_virtual_machine_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_virtual_machine_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_virtual_machine_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_data_protection_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_data_protection_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_data_protection_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_orchestrator:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_orchestrator:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_orchestrator:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_service_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_service_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_service_manager:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:*:-:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:*:-:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:system_center_operations_manager:*:-:*:*:*:*:*:*",
                  "versionStartIncluding": "N/A",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2025-04-08T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Untrusted search path in System Center allows an authorized attacker to elevate privileges locally."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426: Untrusted Search Path",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-04T17:52:40.439Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft System Center Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27743"
        }
      ],
      "title": "Microsoft System Center Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2025-27743",
    "datePublished": "2025-04-08T17:23:25.628Z",
    "dateReserved": "2025-03-06T04:26:08.553Z",
    "dateUpdated": "2025-06-04T17:52:40.439Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}