What is CVE-2025-47733?

CVE-2025-47733 is a critical-severity vulnerability in Microsoft Power Pages, classified under Server-Side Request Forgery (SSRF). CVSS score: 9.1/10. Published 2025-05-08.

How severe is CVE-2025-47733?

Critical severity. CVSS v3 base score is 9.1 out of 10.

SSRF in Microsoft Power Pages

CVE-2025-47733

Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.043 (89.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C.

Affected products

Microsoft Power Pages

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

References

Microsoft Power Apps Information Disclosure Vulnerability (vendor-advisory, patch)

Frequently asked questions

What is CVE-2025-47733?: CVE-2025-47733 is a critical-severity vulnerability in Microsoft Power Pages, classified under Server-Side Request Forgery (SSRF). CVSS score: 9.1/10. Published 2025-05-08.
How severe is CVE-2025-47733?: Critical severity. CVSS v3 base score is 9.1 out of 10.