3635 matches found
The vulnerability of the Dynamics 365 Field Service software, related to the lack of measures taken to protect the website structure, allows attackers to carry out spoofing attacks.
The vulnerability of the Dynamics 365 Field Service software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to carry out spoofing attacks...
Security Updates for Microsoft Dynamics 365 (on-premises) (November 2025) - CVE-2025-62206
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. Note that Nessus has not tested for this issue but has instead relied only on the...
CVE-2025-62206
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...
CVE-2025-62211
Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...
CVE-2025-62210
Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...
The vulnerability of the Dynamics 365 Field Service resource planning software lies in the lack of protective measures for the website structure, allowing attackers to perform spear-phishing attacks.
The vulnerability of the Dynamics 365 Field Service resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft fixed vulnerabilities in Dynamics The vulnerabilities are in Dynamics 365 On Premise and Dynamics Field Service and allow a malicious person to access sensitive data, or impersonate another user. Microsoft has made updates available that fix the described vulnerabilities. We encourage y...
CVE-2025-62211
Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...
CVE-2025-62211
Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...
CVE-2025-62210
Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...
CVE-2025-62210
Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...
CVE-2025-62206
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...
CVE-2025-62206
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...
CVE-2025-62211 Dynamics 365 Field Service (online) Spoofing Vulnerability
...
EUVD-2025-93399
Improper neutralization of input during web page generation 'cross-site scripting' in Dynamics 365 Field Service online allows an authorized attacker to perform spoofing over a network...
CVE-2025-62211 Dynamics 365 Field Service (online) Spoofing Vulnerability
...
CVE-2025-62211
Summary (CVE-2025-62211) : A cross-site scripting vulnerability in Microsoft Dynamics 365 Field Service (online) allows an authorized attacker to spoof the user interface over a network due to improper neutralization of input during web page generation. The CVSS metrics (AV:N/AC:L/PR:L/UI:R/S:C/C...
CVE-2025-62210 Dynamics 365 Field Service (online) Spoofing Vulnerability
...