Lucene search
MicrosoftMS:CVE-2024-35260HistoryJun 27, 2024 - 7:00 a.m.
Microsoft Dataverse Remote Code Execution Vulnerability
2024-06-2707:00:00
Microsoft
msrc.microsoft.com
16
dataverse
remote execution
vulnerability
microsoft
CVSS3
8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0.001
Percentile
19.4%
An authenticated attacker can exploit an Untrusted Search Path vulnerability in Microsoft Dataverse to execute code over a network.
Related
vulnrichment
vulnrichment
CVE-2024-35260 Microsoft Dataverse Remote Code Execution Vulnerability
2024-06-27 17:32:27
cve
cve
CVE-2024-35260
2024-06-27 18:15:18
nvd
nvd
CVE-2024-35260
2024-06-27 18:15:18
kaspersky
kaspersky
KLA70178 ACE vulnerability in Microsoft Dynamics
2024-06-27 00:00:00
cvelist
cvelist
CVE-2024-35260 Microsoft Dataverse Remote Code Execution Vulnerability
2024-06-27 17:32:27
CVSS3
8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
0.001
Percentile
19.4%
Related for MS:CVE-2024-35260