CVE-2024-35263

MediumCVSS 5.7

Published: 11/06/2024(UTC)Updated: 20/07/2026(UTC)Translated: 21/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.66%

74th percentile - higher than 74% of all known CVEs

Summary

An information disclosure vulnerability in Microsoft Dynamics 365 (On-Premises) allows unauthorized users to access sensitive data. The flaw stems from improper access control management of system resources.

Risk Assessment

The organization is at risk of leaking sensitive business data, such as customer records or financial information, potentially leading to data protection violations and reputational damage.

Recommendation

Apply the security update provided by Microsoft for Dynamics 365 (On-Premises) immediately. Test the patch in a non-production environment before deployment.

Original NVD description (English source)

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability