CVE-2025-62210

Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...

CVE-2025-62211

Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...

CVE-2025-62211

Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...

CVE-2025-62210

Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...

CVE-2025-62206

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...

CVE-2025-62206

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...

EUVD-2025-93399

Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...

CVE-2025-62211 Dynamics 365 Field Service (online) Spoofing Vulnerability

...

CVE-2025-62211 Dynamics 365 Field Service (online) Spoofing Vulnerability

...

CVE-2025-62211

Summary (CVE-2025-62211) : A cross-site scripting vulnerability in Microsoft Dynamics 365 Field Service (online) allows an authorized attacker to spoof the user interface over a network due to improper neutralization of input during web page generation. The CVSS metrics (AV:N/AC:L/PR:L/UI:R/S:C/C...

CVE-2025-62206 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2025-62210 Dynamics 365 Field Service (online) Spoofing Vulnerability

...

EUVD-2025-93430

Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...

EUVD-2025-93431

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...

CVE-2025-62210

CVE-2025-62210 affects Dynamics 365 Field Service (online). The issue is an improper neutralization of input during web page generation (XSS) in Dynamics 365 Field Service (online), enabling an authorized attacker to perform spoofing over the network. Affected software is Dynamics 365 Field Servi...

CVE-2025-62206

CVE-2025-62206 pertains to an information disclosure in Microsoft Dynamics 365 (on-premises) . The vulnerability allows an unauthorized network attacker to disclose potentially sensitive information via exposed data, with a CVSSv3.1 base score of 6.5 (Network, Low attack complexity, No privileges...

CVE-2025-62210 Dynamics 365 Field Service (online) Spoofing Vulnerability

...

CVE-2025-62206 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...

Dynamics 365 Field Service (online) Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...