Description
Improper restriction of xml external entity reference in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Power Apps | 1710 (9.2.23071.136) – < publication | publication |
Advisories 1
- WID-SEC-2026-4486 Microsoft Power Apps für Dynamics CRM Platform: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Nov 10, 2026
References
- Microsoft Dynamics 365 (on-premises) Information Disclosure Vulnerability vendor-advisory patch