CVE-2025-29821

CVE-2025-29821 affects Microsoft Dynamics 365 Business Central. It results from improper input validation in Dynamics Business Central, enabling an authorized attacker to disclose information locally (confidentiality impact HIGH; CVSS v3.1: 5.5 MEDIUM, LOCAL access, no user interaction). Microsof...

CVE-2025-29821 Microsoft Dynamics Business Central Information Disclosure Vulnerability

...

CVE-2025-29821 Microsoft Dynamics Business Central Information Disclosure Vulnerability

...

Update 24.12 for Microsoft Dynamics 365 Business Central 2024 Release Wave 1 (Application Build 24.12.32447, Platform Build 24.0.32305)

None None...

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...

Update 25.6 for Microsoft Dynamics 365 Business Central 2024 Release Wave 2 (Application Build 25.6.32556, Platform Build 25.2.32308)

None None...

Update 23.18 for Microsoft Dynamics 365 Business Central 2023 Release Wave 2 (Application Build 23.18.32409, Platform Build 23.0.32309)

None None...

PT-2025-15593 · Microsoft · Dynamics Business Central

Name of the Vulnerable Software and Affected Versions: Dynamics Business Central affected versions not specified Description: The issue is related to improper input validation, which allows an authorized attacker to disclose information locally. This means that an attacker with authorization can...

KLA82403 OSI vulnerability in Microsoft Dynamics

Information disclosure vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2025-29821 Related products Microsoft-Dynamics-365 CVE list CVE-2025-29821 high KB list 50567...

KLA81934 ACE vulnerability in Microsoft Dynamics

A remote code execution vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-29807 Related products Microsoft-Dynamics-365 CVE list CVE-2025-29807 critical KB list Solution Install necessary updates...

KLA81600 PE vulnerability in Microsoft Dynamics

An elevation of privilege vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-24053 Related products Dynamics-CRM-Service CVE list CVE-2025-24053 high KB list Solution Install necessary updates from the KB...

The vulnerability of the Microsoft Dynamics 365 Sales resource planning software server lies in insufficient validation of requests on the server side, allowing attackers to increase their privileges.

The vulnerability of the Microsoft Dynamics 365 Sales resource planning software server relates to insufficient validation of requests on the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

KLA80251 PE vulnerability in Microsoft Dynamics

An elevation of privilege vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-24989 Related products Microsoft-Power-Platform CVE list CVE-2025-24989 critical Solution Install necessary updates from the KB...

Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability

Microsoft Dynamics 365 Sales is a powerful tool designed to streamline and enhance the sales process, providing sales teams with the insights and data to build strong customer relationships and close deals effectively. An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Sales...

Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for February of 2025 which includes 63 vulnerabilities affecting a range of products, including 4 that Microsoft marked as "critical" and one marked as "moderate." There are two notable "critical" vulnerabilities. The first is CVE-2025-21376, whi...

CVE-2025-21177

Server-Side Request Forgery SSRF in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network...

CVE-2025-21177

Server-side request forgery ssrf in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network...

CVE-2025-21177 Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability

...

CVE-2025-21177 Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability

...

CVE-2025-21177

CVE-2025-21177 : Microsoft Dynamics 365 Sales contains a Server-Side Request Forgery (SSRF) that can enable an authenticated attacker to elevate privileges over the network. The issue is documented in multiple feeds (NVD, Microsoft MSRC) with high CVSS scores (8.7–8.8). Public details confirm the...