Improper neutralization of input during web page generation (‘cross-site scripting’) in Azure Monitor allows an authorized attacker to perform spoofing over a network.
CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability
Published November 9, 2025