Critical CVSS 8.8 EPSS 0.00415 2025-11 archive

Executive Summary

Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network.

Overview

8.8
CVSS HIGH
Critical
MS Severity
Not Exploited
MS Exploit Status
More Likely
MS Exploit Likelihood
Category Elevation of Privilege
Released Nov 11 2025
Last Updated Nov 11 2025
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.00415 — 0.33051 percentile

CVSS Vector

ATTACK VECTOR
Network
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
None
USER INTERACTION
Required
SCOPE
Unchanged
Temporal Score: 7.7

EPSS Score

0.00415
probability of exploitation in the next 30 days
0.33051 percentile - updated 2026-06-20
View on FIRST.org

Affected Products

1 affected product
Product KB Article Severity Impact Restart Required
Dynamics OmniChannel SDK Storage Containers Critical Elevation of Privilege Unknown

Patches

1 patch
Article Type Restart
Unknown

Known Exploits

Acknowledgments

Vaisha Bernard with Eye Security