CVE-2024-35263 - Vulnerability Details - OpenCVE

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.05518.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Microsoft	Dynamics 365

Configuration 1 [-]

cpe:2.3:a:microsoft:dynamics_365:9.1:*:*:*:on-premises:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2024-35767	Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35263

History

No history.

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2024-06-11T17:00:08.880Z

Updated: 2025-07-16T00:42:33.242Z

Reserved: 2024-05-14T20:14:47.413Z

Link: CVE-2024-35263

Vulnrichment

Updated: 2024-08-02T03:07:46.806Z

NVD

Status : Modified

Published: 2024-06-11T17:16:03.773

Modified: 2024-11-21T09:20:02.580

Link: CVE-2024-35263

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-35263", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2024-05-14T20:14:47.413Z", "datePublished": "2024-06-11T17:00:08.880Z", "dateUpdated": "2025-07-16T00:42:33.242Z"}, "containers": {"cna": {"title": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability", "datePublic": "2024-06-11T07:00:00.000Z", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*", "versionStartIncluding": "9.0", "versionEndExcluding": "1.29"}]}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Dynamics 365 (on-premises) version 9.1", "platforms": ["Unknown"], "versions": [{"version": "9.0", "lessThan": "1.29", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", "lang": "en-US", "type": "CWE", "cweId": "CWE-200"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-07-16T00:42:33.242Z"}, "references": [{"name": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability", "tags": ["vendor-advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35263"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 5.7, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-11T18:46:23.703041Z", "id": "CVE-2024-35263", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-11T18:46:30.999Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:07:46.806Z"}, "title": "CVE Program Container", "references": [{"name": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability", "tags": ["vendor-advisory", "x_transferred"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35263"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35263", "name": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:07:46.806Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-35263", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-11T18:46:23.703041Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-11T18:46:27.945Z"}}], "cna": {"title": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 5.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft Dynamics 365 (on-premises) version 9.1", "versions": [{"status": "affected", "version": "9.0", "lessThan": "1.29", "versionType": "custom"}], "platforms": ["Unknown"]}], "datePublic": "2024-06-11T07:00:00.000Z", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35263", "name": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en-US", "value": "Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability"}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*", "vulnerable": true, "versionEndExcluding": "1.29", "versionStartIncluding": "9.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-07-16T00:42:33.242Z"}}}, "cveMetadata": {"cveId": "CVE-2024-35263", "state": "PUBLISHED", "dateUpdated": "2025-07-16T00:42:33.242Z", "dateReserved": "2024-05-14T20:14:47.413Z", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2024-06-11T17:00:08.880Z", "assignerShortName": "microsoft"}, "dataVersion": "5.1"}