Dynamics 365 Security Vulnerabilities and Issues — Dynamics 365 CVE List

cve

CVE-2018-8605

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft ...

5.4CVSS

5.2AI Score

0.002EPSS

2018-11-14 01:29 AM

41

cve

CVE-2018-8606

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft ...

5.4CVSS

5.2AI Score

0.002EPSS

2018-11-14 01:29 AM

38

cve

CVE-2018-8607

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft ...

5.4CVSS

5.2AI Score

0.002EPSS

2018-11-14 01:29 AM

33

cve

CVE-2018-8608

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft ...

5.4CVSS

5.2AI Score

0.002EPSS

2018-11-14 01:29 AM

37

cve

CVE-2018-8609

A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Remote Code Execution Vulnerability." This affects Microsoft Dyn...

8.8CVSS

9.2AI Score

0.021EPSS

2018-11-14 01:29 AM

51

cve

CVE-2018-8654

An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Server, aka 'Microsoft Dynamics 365 Elevation of Privilege Vulnerability'.

6.5CVSS

6.4AI Score

0.001EPSS

2020-01-24 09:15 PM

46

cve

CVE-2019-1008

A security feature bypass vulnerability exists in Dynamics On Premise, aka 'Microsoft Dynamics On-Premise Security Feature Bypass'.

5.9CVSS

5.6AI Score

0.001EPSS

2019-05-16 07:29 PM

68

cve

CVE-2019-1229

An elevation of privilege vulnerability exists in Dynamics On-Premise v9. An attacker who successfully exploited the vulnerability could leverage a customizer privilege within Dynamics to gain control of the Web Role hosting the Dynamics installation.To exploit this vulnerability, an attacker needs...

8.8CVSS

8.6AI Score

0.001EPSS

2019-08-14 09:15 PM

56

cve

CVE-2019-1375

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

5.4CVSS

5AI Score

0.001EPSS

2019-10-10 02:15 PM

41

cve

CVE-2020-0656

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

5.4CVSS

5AI Score

0.001EPSS

2020-01-14 11:15 PM

64

cve

CVE-2020-1063

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

5.4CVSS

5.2AI Score

0.001EPSS

2020-05-21 11:15 PM

44

cve

CVE-2020-1591

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics s...

5.4CVSS

5.5AI Score

0.001EPSS

2020-08-17 07:15 PM

49

cve

CVE-2020-16858

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

45

cve

CVE-2020-16859

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

44

cve

CVE-2020-16860

A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account...

6.8CVSS

7.4AI Score

0.043EPSS

2020-09-11 05:15 PM

48

cve

CVE-2020-16861

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

41

cve

CVE-2020-16862

A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account...

7.1CVSS

7.5AI Score

0.039EPSS

2020-09-11 05:15 PM

54

cve

CVE-2020-16864

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

39

cve

CVE-2020-16871

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

46

cve

CVE-2020-16872

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

7.6CVSS

6.8AI Score

0.001EPSS

2020-09-11 05:15 PM

42

cve

CVE-2020-16878

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

53

cve

CVE-2020-16943

An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who successfully exploited this vulnerability could update data without proper authorization.To exploit the vulnerability, an attacker would need to send a specially crafted requ...

6.5CVSS

6.3AI Score

0.001EPSS

2020-10-16 11:15 PM

115

cve

CVE-2020-16956

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.2AI Score

0.001EPSS

2020-10-16 11:15 PM

105

cve

CVE-2020-16978

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.2AI Score

0.001EPSS

2020-10-16 11:15 PM

101

cve

CVE-2020-17005

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

5.2AI Score

0.001EPSS

2020-11-11 07:15 AM

44

cve

CVE-2020-17018

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

5.2AI Score

0.001EPSS

2020-11-11 07:15 AM

47

cve

CVE-2020-17021

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

5.2AI Score

0.001EPSS

2020-11-11 07:15 AM

59

cve

CVE-2020-17147

Dynamics CRM Webclient Cross-site Scripting Vulnerability

8.7CVSS

8.3AI Score

0.001EPSS

2020-12-10 12:15 AM

69

cve

CVE-2020-17152

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

8.8CVSS

8.8AI Score

0.013EPSS

2020-12-10 12:15 AM

95

3

cve

CVE-2020-17158

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

8.8CVSS

8.8AI Score

0.013EPSS

2020-12-10 12:15 AM

92

3

cve

CVE-2021-24101

Microsoft Dataverse Information Disclosure Vulnerability

6.5CVSS

6AI Score

0.014EPSS

2021-02-25 11:15 PM

53

3

cve

CVE-2021-28461

Dynamics Finance and Operations Cross-site Scripting Vulnerability

6.1CVSS

6.1AI Score

0.001EPSS

2021-05-11 07:15 PM

69

cve

CVE-2021-34524

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

8.1CVSS

8.1AI Score

0.007EPSS

2021-08-12 06:15 PM

68

3

cve

CVE-2021-36950

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

6.2AI Score

0.001EPSS

2021-08-12 06:15 PM

66

cve

CVE-2021-40457

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

7.4CVSS

6.8AI Score

0.005EPSS

2021-10-13 01:15 AM

47

cve

CVE-2021-41353

Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability

5.4CVSS

5.8AI Score

0.001EPSS

2021-10-13 01:15 AM

52

cve

CVE-2021-41354

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

5.7AI Score

0.001EPSS

2021-10-13 01:15 AM

56

cve

CVE-2021-42316

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

8.8CVSS

9.3AI Score

0.013EPSS

2021-11-10 01:19 AM

63

cve

CVE-2022-21932

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

7.6CVSS

5.9AI Score

0.001EPSS

2022-01-11 09:15 PM

60

cve

CVE-2022-21957

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

7.2CVSS

7.6AI Score

0.011EPSS

2022-02-09 05:15 PM

172

cve

CVE-2022-23259

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

8.8CVSS

9.2AI Score

0.009EPSS

2022-04-15 07:15 PM

146

cve

CVE-2022-34700

Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability

8.8CVSS

9.2AI Score

0.011EPSS

2022-09-13 07:15 PM

57

10

cve

CVE-2022-35805

Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability

8.8CVSS

9.2AI Score

0.013EPSS

2022-09-13 07:15 PM

62

9

cve

CVE-2023-21570

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

6AI Score

0.001EPSS

2023-02-14 08:15 PM

73

cve

CVE-2023-21571

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

6AI Score

0.001EPSS

2023-02-14 08:15 PM

55

cve

CVE-2023-21572

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

6.5CVSS

6.7AI Score

0.001EPSS

2023-02-14 08:15 PM

56

cve

CVE-2023-21573

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

6AI Score

0.001EPSS

2023-02-14 08:15 PM

63

cve

CVE-2023-21778

Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability

8CVSS

8.4AI Score

0.014EPSS

2023-02-14 09:15 PM

69

cve

CVE-2023-21807

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

6.5CVSS

6.7AI Score

0.001EPSS

2023-02-14 08:15 PM

64

cve

CVE-2023-24879

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

6AI Score

0.001EPSS

2023-03-14 05:15 PM

65