CISA Warns of Actively Exploited SQL Injection Flaw in Microsoft Configuration Manager

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Issues Warning on SQL Injection Vulnerability in Microsoft Configuration Manager The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding a critical SQL injection vulnerability in Microsoft Configuration Manager that is currently being actively exploited. Organizations using this software are urged to take immediate action to mitigate the risk associated with this vulnerability. 8 sources 72