EUVD-2025-208846Lifecycle Timeline
3DescriptionCVE.org
Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) allows the generation of customized reports via raw SQL queries in an upload of a .rdl (Report Definition Language) file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting Services Reports can upload a malicious rdl file. If the malicious rdl file is already loaded and it is executable by the user, the Add Reporting Services Reports privilege is not required. A malicious actor can trigger the generation of the report, causing the execution of arbitrary SQL commands in the underlying database. Depending on the permissions of the account running SQL Server Reporting Services, the attacker may be able to perform additional actions, such as accessing linked servers or executing operating system commands.
AnalysisAI
This vulnerability enables arbitrary SQL command execution in Microsoft Dynamics 365 Customer Engagement (on-premises) version 1612 through malicious Report Definition Language (RDL) files uploaded to SQL Server Reporting Services. An attacker with the 'Add Reporting Services Reports' privilege can upload a crafted RDL file containing raw SQL queries; if the file is already loaded and executable by the user, this privilege is not required. Upon report generation, arbitrary SQL commands execute in the underlying database, potentially allowing data exfiltration, linked server access, or operating system command execution depending on SQL Server service account permissions. A proof-of-concept has been documented in public repositories, indicating active research and potential exploitation risk.
Technical ContextAI
The vulnerability resides in the Report Definition Language processing pipeline within SQL Server Reporting Services (SSRS) integrated with Microsoft Dynamics 365 Customer Engagement. RDL is an XML-based specification for defining reports; SSRS compiles and executes these definitions server-side. The vulnerability exploits insufficient input validation and sanitization in the RDL parser, which fails to restrict raw SQL query execution when RDL files are uploaded and rendered. This is fundamentally a CWE-89 (SQL Injection) issue, compounded by CWE-434 (Unrestricted Upload of File with Dangerous Type) and CWE-94 (Improper Control of Generation of Code). The affected product, Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (build 9.0.2.3034), couples SSRS with Dynamics' multi-tenant data model, creating a high-impact vector if an account with report management privileges is compromised or misconfigured.
RemediationAI
Immediately upgrade Microsoft Dynamics 365 Customer Engagement (on-premises) to a patched version beyond 1612 (9.0.2.3034); consult the Microsoft security advisory at https://microsoft.com for the minimum supported patch level. Until patching is feasible, implement the following compensating controls: (1) Restrict the 'Add Reporting Services Reports' privilege to only trusted administrative accounts with multi-factor authentication; (2) Audit and remove any existing RDL files not created by verified internal processes; (3) Enable SQL Server Reporting Services audit logging and monitor for unusual report execution patterns or queries; (4) Apply principle of least privilege to the SQL Server service account running SSRS—remove xp_cmdshell and cross-database ownership chaining permissions if not explicitly required; (5) Segment network access to SSRS endpoints using firewall rules limiting connections to known trusted hosts. For organizations unable to patch immediately, consider air-gapping or decommissioning the affected Dynamics 1612 instance and migrating to a supported cloud or on-premises version.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today