Product:
Microsoft Dynamics 365
Summary
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to disclose information over a network. This vulnerability can lead to significant confidentiality breaches. Attackers can exploit this issue to gain access to sensitive data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-62206 |
Exploitation
To exploit this vulnerability, an attacker must have network access to the affected system and require user interaction. By leveraging this access, the attacker can disclose sensitive information, potentially leading to further attacks or data breaches.
Affected Products
- Microsoft Dynamics 365 (on-premises): Vulnerable to unauthorized information disclosure over a network.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, organizations should implement strict access controls and monitor network traffic for any unauthorized access attempts.