EXPOSURES › CVE-2024-35260

CVE-2024-35260

HIGH

DETAIL

SourceNVD · cve Published2024-06-27 CVSS8.0 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2024-35260 ↗

▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED

DESCRIPTION

An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network.

AFFECTED FEDRAMP PRODUCTS · 4

PRODUCT	PROVIDER	STATUS	MATCH
Azure Commercial Cloud Microsoft	Microsoft	Authorized	vendor-exact · 0.90
Azure Government (includes Dynamics 365) Microsoft	Microsoft	Authorized	vendor-exact · 0.90
Microsoft Office 365 GCC High Microsoft	Microsoft	In Process	vendor-exact · 0.90
Office 365 Multi-Tenant & Supporting Services Microsoft	Microsoft	Authorized	vendor-exact · 0.90