CVE-2025-21177

Summary

CVE-2025-21177 is a Server-Side Request Forgery (SSRF) vulnerability affecting Microsoft Dynamics 365 Sales. An attacker who has already gained authorized access can exploit this flaw to send malicious network requests on behalf of the server, potentially leading to privilege escalation over a network. This issue represents a significant risk, as it enables unauthorized network access and manipulation of data. Microsoft has released a patch to mitigate this vulnerability and it is strongly recommended that users update their systems promptly to protect against potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.