Skip to content
OpenAdvisories
High WID-SEC-2025-2560 3 CVEs

Microsoft Dynamics 365: Mehrere Schwachstellen

Published Nov 11, 2025 · Updated Nov 11, 2025 · de-DE

Vendor: Microsoft Product: Dynamics 365 Platform: Windows

Summary

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Microsoft Dynamics 365 ausnutzen, um vertrauliche Informationen offenzulegen und Spoofing-Angriffe mit potenzieller Skriptausführung durchzuführen.

Product

Microsoft Dynamics 365 ist eine All-in-One-Unternehmensmanagementlösung.

Vulnerabilities 3

  • High 8.7
    CVE-2025-62210

    Dynamics 365 Field Service (online) Spoofing Vulnerability

    Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network.

    Microsoft Dynamics 365 Field Service (online)
  • High 8.7
    CVE-2025-62211

    Dynamics 365 Field Service (online) Spoofing Vulnerability

    Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network.

    Microsoft Dynamics 365 Field Service (online)
  • Medium 6.5
    CVE-2025-62206

    Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

    Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to disclose information over a network.

    Microsoft Microsoft Dynamics 365 (on-premises) version 9.1

Revision history

  1. #1

    Initiale Fassung

References