First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-24469

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Azure Site Recovery Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected software

Vendor	Product	Versions
Microsoft	Azure Site Recovery VMWare to Azure	>= 9.0, < 9.47

References

Timeline

Published: Mar 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-24476.6A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token shou CVE-2022-244707.2Azure Site Recovery Remote Code Execution Vulnerability CVE-2022-244717.2Azure Site Recovery Remote Code Execution Vulnerability CVE-2022-244728.0Microsoft SharePoint Server Spoofing Vulnerability CVE-2022-244737.8Microsoft Excel Remote Code Execution Vulnerability CVE-2022-244747.8Windows Win32k Elevation of Privilege Vulnerability CVE-2022-244758.3Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2022-244778.0Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2022-244797.8Connected User Experiences and Telemetry Elevation of Privilege Vulnerability CVE-2022-24484.8The reSmush.it WordPress plugin before 0.4.6 does not sanitise and escape some of its settings, which could allow high privilege users such CVE-2022-244806.3Outlook for Android Elevation of Privilege Vulnerability CVE-2022-244817.8Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2022-24469: High severity, CVSS 8.1 | Vulnix