# Microsoft Azure Automation State Configuration, DSC Extension.

Every CVE that names Microsoft Azure Automation State Configuration, DSC Extension among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29149.md)
  `CVE-2022-29149` · CVE record: Microsoft Azure Automation State Configuration, DSC Extension and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Jun 2022
- [Open Management Infrastructure Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-38649.md)
  `CVE-2021-38649` · CVE record: Microsoft Azure Automation State Configuration, DSC Extension and 4 more · CVSS 7.0 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 15 Sept 2021
- [Open Management Infrastructure Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-38648.md)
  `CVE-2021-38648` · CVE record: Microsoft Azure Automation State Configuration, DSC Extension and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.11 · Not analysed yet · Published 15 Sept 2021
- [Open Management Infrastructure (OMI) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-38647.md)
  `CVE-2021-38647` · CVE record: Microsoft Azure Automation State Configuration, DSC Extension and 4 more · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 15 Sept 2021
- [Open Management Infrastructure Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-38645.md)
  `CVE-2021-38645` · CVE record: Microsoft Azure Automation State Configuration, DSC Extension and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 15 Sept 2021

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-azure-automation-state-configuration-dsc-extension>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-azure-automation-state-configuration-dsc-extension/>. Everything for agents: <https://agentprime.io/llms.txt>.