CVEDB API

Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 30.3%

CVSS Severity

CVSS v3 Score 5.7

References

Products affected by CVE-2025-29817

Microsoft » Power Automate For Desktop » Version: N/A

cpe:2.3:a:microsoft:power_automate_for_desktop:-
Microsoft » Power Automate For Desktop » Version: 2.46

cpe:2.3:a:microsoft:power_automate_for_desktop:2.46
Microsoft » Power Automate For Desktop » Version: 2.46.184.25013

cpe:2.3:a:microsoft:power_automate_for_desktop:2.46.184.25013
Microsoft » Power Automate For Desktop » Version: 2.47

cpe:2.3:a:microsoft:power_automate_for_desktop:2.47
Microsoft » Power Automate For Desktop » Version: 2.47.126.25010

cpe:2.3:a:microsoft:power_automate_for_desktop:2.47.126.25010
Microsoft » Power Automate For Desktop » Version: 2.48

cpe:2.3:a:microsoft:power_automate_for_desktop:2.48
Microsoft » Power Automate For Desktop » Version: 2.48.164.25010

cpe:2.3:a:microsoft:power_automate_for_desktop:2.48.164.25010
Microsoft » Power Automate For Desktop » Version: 2.49

cpe:2.3:a:microsoft:power_automate_for_desktop:2.49
Microsoft » Power Automate For Desktop » Version: 2.49.182.25010

cpe:2.3:a:microsoft:power_automate_for_desktop:2.49.182.25010
Microsoft » Power Automate For Desktop » Version: 2.50

cpe:2.3:a:microsoft:power_automate_for_desktop:2.50
Microsoft » Power Automate For Desktop » Version: 2.50.139.25010

cpe:2.3:a:microsoft:power_automate_for_desktop:2.50.139.25010
Microsoft » Power Automate For Desktop » Version: 2.51

cpe:2.3:a:microsoft:power_automate_for_desktop:2.51