Microsoft Microsoft Dataverse

Name: Microsoft Microsoft Dataverse
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical8high0medium0low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-47732US	critical9.8	3.71% (90th)	—	no fix	2025-05-08	—
CVE-2026-100214US	high8.8	2.07% (81st)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2025-29807US	high8.8	1.39% (72nd)	—	no fix	2025-03-21	2 versions
CVE-2026-88131US	critical9.8	1.23% (69th)	—	no fix	2026-10-08	2 versions
CVE-2026-105727US	high8.8	1.04% (64th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-102226US	high8.8	1.04% (64th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2025-29826US	high8.8	0.86% (59th)	—	3.4.0.1406	2025-05-13	10.0 → 3.4.0.1406
CVE-2025-24053US	—	0.76% (55th)	—	no fix	2025-03-13	2 versions
CVE-2024-38139US	high8.8	0.75% (55th)	—	no fix	2024-10-15	—
CVE-2026-70213US	high8.0	0.39% (33rd)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-77903US	high8.1	0.37% (31st)	—	no fix	2026-09-17	—
CVE-2026-102848US	—	—	—	no fix	—	≤ vers:unknown/*

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-280Improper Handling of Insufficient Permissions or Privileges1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-290Authentication Bypass by Spoofing1 CVEs
CWE-346Origin Validation Error1 CVEs
CWE-755Improper Handling of Exceptional Conditions1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.