CVE-2020-16971

HIGH

Azure SDK for Java - Privilege Escalation

Title source: llm

Azure SDK for Java Security Feature Bypass Vulnerability

Core 2

Core References

Vendor Advisory vendor-advisory patch

Vendor Advisory

CVSS v3 7.4

EPSS 0.0359

EPSS Percentile 88.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Status published

Products (5)

com.azure/azure-core-amqp 0 - 1.6.0Maven

com.microsoft.azure/azure-eventhubs 0 - 3.2.1Maven

Microsoft/Azure SDK 1.0.0 - 1.6.0

Microsoft/Azure SDK for Java 1.0.0 - publication

microsoft/azure_sdk_for_java

Published Dec 10, 2020

Tracked Since Feb 18, 2026