CVE-2025-47732CWE-502

Microsoft Dataverse Remote Code Execution Vulnerability

High · published May 8, 2025

CVSS v3.1

8.7

EPSS

4%

Percentile

89.7

In the wild

Unconfirmed

What it is

Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.

The record

Technical detail

CVSS v3.1: 8.7 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C
CVSS v4.0: Not supplied
EPSS: 0.03711 · 89.7th percentile
Weakness: CWE-502 · Deserialization of Untrusted Data
Published: 2025-05-08T22:17Z

EPSS history

Timeline

08 MAY 22:17Z
Microsoft Dataverse Remote Code Execution Vulnerability
cvelistv5