Product:
Dynamics 365 Field Service
Summary
Improper neutralization of input during web page generation allows an authorized attacker to perform spoofing over a network. This vulnerability can lead to significant security risks, including unauthorized access and data manipulation. It is crucial for users to be aware of this issue to protect their systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.7 | CVE-2025-62211 |
Exploitation
To exploit this vulnerability, an attacker must have authorized access to the system and can then craft malicious input that is improperly handled during web page generation. This can lead to cross-site scripting attacks, allowing the attacker to spoof content and potentially manipulate user interactions with the application.
Affected Products
- Dynamics 365 Field Service (online) – Affected by improper input handling leading to cross-site scripting vulnerabilities.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, users should implement input validation and sanitization measures to prevent unauthorized input from being processed by the application.