CVE-2025-53728

published 2025-08-12

CVE-2025-53728: Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to disclose information over…

medium 6.5 CVSS 3.1

AV N AC L PR N UI R S U C H I N A N

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to disclose information over a network.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
microsoft	dynamics_365	>= 9.1 < 9.1.39.04	9.1.39.04
microsoft	microsoft_dynamics_365_version_9.1	>= 9.0 < 9.1.39	9.1.39
msrc	microsoft_dynamics_365_version_9.1	—	—

CWE-200