Jun 2025: Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
CVE-2025-49715 Published on June 20, 2025

Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a network.

Vendor Advisory NVD

Weakness Type

What is a Privacy violation Vulnerability?

The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.

CVE-2025-49715 has been classified to as a Privacy violation vulnerability or weakness.


Products Associated with CVE-2025-49715

stack.watch emails you whenever new vulnerabilities are published in Microsoft Dynamics 365 or Microsoft Dynamics 365 Fasttrack Implementation. Just hit a watch button to start following.

 
 

Affected Versions

Microsoft Dynamics 365 FastTrack Implementation Version - is affected by CVE-2025-49715

Exploit Probability

EPSS
0.31%
Percentile
53.66%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.