CVE-2025-49715

7.5 highEPSS 0.8%

High (7.5) in microsoft dynamics 365. EPSS 0.8% chance of exploitation in the next 30 days.

Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a network.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-359
Published: 2025-06-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:dynamics_365

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49715

Check your stack JSON