CVE-2024-35263 - Vulnerability Details - OpenCVE

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.05562.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Microsoft	Dynamics 365

Configuration 1 [-]

cpe:2.3:a:microsoft:dynamics_365:9.1:*:*:*:on-premises:*:*:*

No data.

No data.

References

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35263

History

Wed, 17 Dec 2025 22:45:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:microsoft:dynamics_365:::::on-premises:::*

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2024-06-11T17:00:08.880Z

Updated: 2025-12-17T22:23:46.027Z

Reserved: 2024-05-14T20:14:47.413Z

Link: CVE-2024-35263

Vulnrichment

Updated: 2024-08-02T03:07:46.806Z

NVD

Status : Modified

Published: 2024-06-11T17:16:03.773

Modified: 2024-11-21T09:20:02.580

Link: CVE-2024-35263

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-35263", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2024-05-14T20:14:47.413Z", "datePublished": "2024-06-11T17:00:08.880Z", "dateUpdated": "2025-12-17T22:23:46.027Z"}, "containers": {"cna": {"title": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability", "datePublic": "2024-06-11T07:00:00.000Z", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*", "versionStartIncluding": "9.0", "versionEndExcluding": "1.29"}]}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Dynamics 365 (on-premises) version 9.1", "platforms": ["Unknown"], "versions": [{"version": "9.0", "lessThan": "1.29", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", "lang": "en-US", "type": "CWE", "cweId": "CWE-200"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-12-17T22:23:46.027Z"}, "references": [{"name": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability", "tags": ["vendor-advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35263"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 5.7, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-11T18:46:23.703041Z", "id": "CVE-2024-35263", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-11T18:46:30.999Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:07:46.806Z"}, "title": "CVE Program Container", "references": [{"name": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability", "tags": ["vendor-advisory", "x_transferred"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35263"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35263", "name": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:07:46.806Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-35263", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-11T18:46:23.703041Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-11T18:46:27.945Z"}}], "cna": {"title": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 5.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Dynamics 365 (on-premises) version 9.1", "versions": [{"status": "affected", "version": "9.0", "lessThan": "1.29", "versionType": "custom"}], "platforms": ["Unknown"]}], "datePublic": "2024-06-11T07:00:00.000Z", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35263", "name": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en-US", "value": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability"}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*", "vulnerable": true, "versionEndExcluding": "1.29", "versionStartIncluding": "9.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-12-17T22:23:46.027Z"}}}, "cveMetadata": {"cveId": "CVE-2024-35263", "state": "PUBLISHED", "dateUpdated": "2025-12-17T22:23:46.027Z", "dateReserved": "2024-05-14T20:14:47.413Z", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2024-06-11T17:00:08.880Z", "assignerShortName": "microsoft"}, "dataVersion": "5.2"}