CVE-2025-62210: Microsoft Dynamics 365

High severity, CVSS 8.7. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network.

Affected products

• Microsoft Dynamics 365: before 8.8.139.398 (fixed in 8.8.139.398)

Published 2025-11-11. Last modified 2026-06-17.