KLA20227 Multiple vulnerabilities in Microsoft Dynamics

🗓️ 14 Feb 2023 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 29 Views

Multiple vulnerabilities in Microsoft Dynamics. Malicious users can exploit the XSS vulnerability to spoof user interface and the remote code execution vulnerability to execute arbitrary code.

Reporter	Title	Published	Views	Family All 75
ATTACKERKB	CVE-2023-21572	14 Feb 202320:15	–	attackerkb
ATTACKERKB	CVE-2023-21573	14 Feb 202320:15	–	attackerkb
ATTACKERKB	CVE-2023-21571	14 Feb 202320:15	–	attackerkb
ATTACKERKB	CVE-2023-21570	14 Feb 202320:15	–	attackerkb
BDU FSTEC	The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.	27 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.	27 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.	27 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.	27 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the lack of measures taken to protect the website structure, allowing attackers to carry out XSS attacks.	7 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Dynamics 365 resource planning software server allows a hacker to execute arbitrary code.	22 Mar 202300:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21807
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21570
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21573
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21572
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21571
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21778
threats	www.threats.kaspersky.com/en/product/Microsoft-Dynamics-365/
support	www.support.microsoft.com/kb/5023506
support	www.support.microsoft.com/kb/5023505
statistics	www.statistics.securelist.com/

28 Mar 2025 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.18

EPSS0.00968

SSVC