CVE-2025-49715 Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
An unauthorized attacker can disclose private personal information over the network in Dynamics 365 FastTrack Implementation Assets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-49715?
CVE-2025-49715 is a high-severity vulnerability in Microsoft Dynamics 365, published on 20 Jun 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a network.
Weakness: CWE-359
Which versions are affected by CVE-2025-49715?
It affects 1 product.
Products include Microsoft Dynamics 365.
How do I fix CVE-2025-49715?
No fix has been published for CVE-2025-49715 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-49715 being exploited?
There is no known exploitation of CVE-2025-49715 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Dynamics 365
- CVE-2026-47647 Dynamics 365 Elevation of Privilege Vulnerability
- CVE-2026-42898 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- CVE-2026-32210 Microsoft Dynamics 365 (online) Spoofing Vulnerability
- CVE-2026-42833 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- CVE-2024-38182 Microsoft Dynamics 365 Elevation of Privilege Vulnerability
Sources
Also known as GHSA-9q34-2w4g-mcrx.