CVE-2025-49715

EPSS 0.11%
Published 20.06.2025 01:15:38
Last modified 17.07.2025 00:43:47
Source secure@microsoft.com
Teams watchlist Login
Open Login

Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a network.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Dynamics 365 Version- SwPlatformfasttrack

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.11%	0.3

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
secure@microsoft.com	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-359 Exposure of Private Personal Information to an Unauthorized Actor

The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49715

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-49715

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-49715

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-49715

EUVD