CVE-2025-21403

MEDIUM 6.4CVE-2025-21403 · Published 14/01/2025 · updated 17/06/2026

In short

CVE-2025-21403 is a MEDIUM (CVSS 6.4) vulnerability affecting on-prem data gateway (microsoft).
Chance of exploitation in the next 30 days (EPSS): 0.59%, higher than 48.4% of all vulnerabilities.
Fix: update to 3000.246 or later.

Package	Affected versions	Patched versions
on-prem data gateway microsoft	`< 3000.246`	`3000.246`

On-Premises Data Gateway Information Disclosure Vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.