Vulnerability in N/a

CVE-2025-66390

In Microsoft Azure API Management through 2025-10-17, when self-service signup (username/password Basic Authentication) is enabled in Tenant A, an attacker can reuse the registration flow by changing the hostname or tenant identifier to Te…

Affected products

  • N/a — versions n/a

References