VULNERABILITY INTELLIGENCE

CVE-2025-64675

CVSS score9.6 CRITICAL

EPSS probability0.71%

CISA KEVNot currently listed

Published2025-12-19

Last modified2026-06-17

Description

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Cosmos DB allows an unauthorized attacker to perform spoofing over a network.