CVE-2025-62206

published 2025-11-11

CVE-2025-62206: Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to disclose information over…

medium 6.5 CVSS 3.1

AV N AC L PR N UI R S U C H I N A N

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to disclose information over a network.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
microsoft	dynamics_365	>= 9.1 < 9.1.41.07	9.1.41.07
microsoft	microsoft_dynamics_365_version_9.1	>= 9.0 < 9.1.41.07	9.1.41.07
msrc	microsoft_dynamics_365_version_9.1	—	—

CWE-200