Home Microsoft CVE-2025-21385
Back to Microsoft

CVE-2025-21385

Target: Microsoft Purview

Microsoft CVSS 8.8 Updated March 7, 2026
Threat Level HIGH

Executive Risk Summary

"A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a network. This vulnerability poses a significant risk as it can lead to unauthorized access to sensitive data."

Operational Audit Arsenal

Target Type Network Service
Target Asset Microsoft Purview
Standard Path Network
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: Microsoft Purview (Network Service)
$Target = "Microsoft Purview"
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Filter $Target -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Unknown
Service Disruption

Low to Moderate

Internal Work Notes

Apply the latest security updates from Microsoft to mitigate the SSRF vulnerability in Microsoft Purview, as referenced in the Microsoft Security Response Center update guide.

Intelligence Sources

Scope of Impact

Purview

Original NVD Description

"A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a network."

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.