PT-2025-26260 · Microsoft · Dynamics 365 Fasttrack Implementation Assets

Gal Nagli + 1 · Published 2025-06-19 · Updated 2025-07-17 · CVE-2025-49715

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dynamics 365 FastTrack Implementation Assets (affected versions not specified)

Description The issue concerns the exposure of private personal information to unauthorized actors in Dynamics 365 FastTrack Implementation Assets, allowing attackers to disclose information over a network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-359

Related Identifiers

BDU:2025-07143

CVE-2025-49715

Affected Products

Dynamics 365 Fasttrack Implementation Assets

References · 9

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49715 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07143 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-49715 · Security Note
• https://t.me/cvenotify/126195 · Telegram Post
• https://t.me/cvetracker/26603 · Telegram Post
• https://twitter.com/cracbot/status/1937828156259348647 · Twitter Post
• https://t.me/latest_high_impact_cve/2725 · Telegram Post
• https://twitter.com/CVEnew/status/1936508725424173423 · Twitter Post
• https://t.me/cvenotify/129249 · Telegram Post