CVE Catalog
CVE-2024-35260
HighCVSS 8.0Exploitation Probability (EPSS)
Elevated risk1.03%
60th percentile - higher than 60% of all known CVEs
Summary
An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network.
Risk Assessment
The risk involves potential takeover of the Dataverse system by an authenticated user, leading to data confidentiality and integrity breaches.
Recommendation
It is recommended to immediately apply the security update provided by Microsoft and restrict user privileges to the minimum necessary.
Other vulnerabilities in Microsoft Dataverse
Original NVD description (English source)
An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network.