Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 1.5%
exploitation probability
1.5%top 29% of all CVEs
observed exploitation
nono source reports it
In short
A flaw in Microsoft Dynamics 365 (On-Premises) allows unauthorized users to access sensitive information they shouldn't see. An attacker with basic access to the system could read confidential data without proper authorization.
Technical detail
CWE-643 (Improper Neutralization of Data Queries) in Dynamics 365 On-Premises allows information disclosure through insufficient access controls. An authenticated attacker can bypass query restrictions to access sensitive data; the vulnerability requires existing system access but results in unauthorized information exposure.
Summary generated and translated by AI from the official description.
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C