Description
Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network
Published: 2025-05-09
Score: 9.1 Critical
EPSS: 2.0% Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-14047 Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network
History

Fri, 13 Feb 2026 20:30:00 +0100

Type Values Removed Values Added
First Time appeared Microsoft power Pages
CPEs cpe:2.3:a:microsoft:power_pages:*:*:*:*:*:*:*:*
Vendors & Products Microsoft power Pages

Tue, 15 Jul 2025 15:45:00 +0200

Type Values Removed Values Added
Metrics epss

{'score': 0.00146}

 epss

{'score': 0.00152}

Wed, 21 May 2025 17:00:00 +0200

Type Values Removed Values Added
First Time appeared Microsoft
Microsoft power Apps
CPEs cpe:2.3:a:microsoft:power_apps:-:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft power Apps

Fri, 09 May 2025 16:15:00 +0200

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 09 May 2025 00:30:00 +0200

Type Values Removed Values Added
Description Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network
Title Microsoft Power Apps Information Disclosure Vulnerability
Weaknesses CWE-918
References
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C'}

Subscriptions

Microsoft Power Apps Power Pages
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-02-13T19:21:36.392Z

Reserved: 2025-05-08T21:59:54.728Z

Link: CVE-2025-47733

cve-icon Vulnrichment

Updated: 2025-05-09T13:40:25.547Z

cve-icon NVD

Status : Analyzed

Published: 2025-05-08T23:15:53.090

Modified: 2026-06-17T09:28:37.450

Link: CVE-2025-47733

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)