Multiple Spoofing Vulnerabilities in Dynamics 365 Field Service

First seen 2 Dec 2025, 18:33 UTC • Api.Msrc.Microsoft

•30

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Two spoofing vulnerabilities (CVE-2025-62211 and CVE-2025-62210) in Dynamics 365 Field Service (online) allow authorized attackers to exploit improper input neutralization during web page generation. Additionally, CVE-2025-62206 exposes sensitive information in Microsoft Dynamics 365 (on-premises) to unauthorized actors. These vulnerabilities could lead to significant security risks for affected users.

How this analysis works

Attack Flow

Continue Reading

China-Nexus APT UAT-7290 Targets South Asia Telecoms in Cyber Espionage Campaign APT28 Exploits MSHTML Zero-Day Vulnerability in Windows Data Breach at University of Phoenix Due to Oracle EBS Zero-Day Exploit Clop Hackers Exploit Oracle Zero-Day, Breaching Barts Health NHS and Dartmouth Data Cisco Secure Email Gateway Targeted by Advanced Persistent Threat Logitech Confirms Data Breach Linked to Clop Extortion Gang

Multiple Spoofing Vulnerabilities in Dynamics 365 Field Service

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading