Microsoft Dynamics 365 (on-premises) Version 9.0 Security Vulnerabilities and Issues — Microsoft Dynamics 365 (on-premises) Version 9.0 CVE List

cve

CVE-2023-36020

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

7.6CVSS

6AI Score

0.001EPSS

2023-12-12 06:15 PM

18

cve

CVE-2023-36030

Microsoft Dynamics 365 Sales Spoofing...

6.1CVSS

6.6AI Score

0.001EPSS

2023-11-14 06:15 PM

34

cve

CVE-2023-36016

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

6.2CVSS

4.9AI Score

0.001EPSS

2023-11-14 06:15 PM

42

cve

CVE-2023-36416

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

6.1CVSS

6.1AI Score

0.001EPSS

2023-10-10 06:15 PM

23

cve

CVE-2023-36429

Microsoft Dynamics 365 (On-Premises) Information Disclosure...

6.5CVSS

6.2AI Score

0.001EPSS

2023-10-10 06:15 PM

24

cve

CVE-2023-36433

Microsoft Dynamics 365 (On-Premises) Information Disclosure...

6.5CVSS

6.2AI Score

0.001EPSS

2023-10-10 06:15 PM

16

cve

CVE-2023-38164

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

7.6CVSS

6AI Score

0.001EPSS

2023-09-12 05:15 PM

36

cve

CVE-2023-36886

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

7.6CVSS

6AI Score

0.001EPSS

2023-09-12 05:15 PM

42

cve

CVE-2023-35389

Microsoft Dynamics 365 On-Premises Remote Code Execution...

6.5CVSS

6.8AI Score

0.011EPSS

2023-08-08 06:15 PM

75

cve

CVE-2023-35335

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

8.2CVSS

8.4AI Score

0.002EPSS

2023-07-11 06:15 PM

43

cve

CVE-2023-33171

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

8.2CVSS

6.4AI Score

0.001EPSS

2023-07-11 06:15 PM

42

cve

CVE-2023-28314

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

6.1CVSS

6.4AI Score

0.001EPSS

2023-04-11 09:15 PM

60

cve

CVE-2023-28309

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

7.6CVSS

6AI Score

0.001EPSS

2023-04-11 09:15 PM

67

cve

CVE-2023-24921

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

5.4CVSS

6AI Score

0.001EPSS

2023-03-14 05:15 PM

73

cve

CVE-2023-24922

Microsoft Dynamics 365 (On-Premises) Information Disclosure...

6.5CVSS

6.6AI Score

0.009EPSS

2023-03-14 05:15 PM

54

cve

CVE-2023-24920

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

5.4CVSS

6AI Score

0.001EPSS

2023-03-14 05:15 PM

54

cve

CVE-2023-24919

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

5.4CVSS

6AI Score

0.001EPSS

2023-03-14 05:15 PM

55

cve

CVE-2023-24891

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

5.4CVSS

6AI Score

0.001EPSS

2023-03-14 05:15 PM

70

cve

CVE-2023-24879

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

5.4CVSS

6AI Score

0.001EPSS

2023-03-14 05:15 PM

65

cve

CVE-2023-21807

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

6.5CVSS

6.7AI Score

0.001EPSS

2023-02-14 08:15 PM

64

cve

CVE-2023-21573

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

5.4CVSS

6AI Score

0.001EPSS

2023-02-14 08:15 PM

63

cve

CVE-2023-21572

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

6.5CVSS

6.7AI Score

0.001EPSS

2023-02-14 08:15 PM

56

cve

CVE-2023-21571

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

5.4CVSS

6AI Score

0.001EPSS

2023-02-14 08:15 PM

55

cve

CVE-2023-21570

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

5.4CVSS

6AI Score

0.001EPSS

2023-02-14 08:15 PM

73

cve

CVE-2022-23259

Microsoft Dynamics 365 On-Premises Remote Code Execution...

8.8CVSS

9.2AI Score

0.009EPSS

2022-04-15 07:15 PM

146

cve

CVE-2022-21957

Microsoft Dynamics 365 On-Premises Remote Code Execution...

7.2CVSS

7.6AI Score

0.011EPSS

2022-02-09 05:15 PM

172

cve

CVE-2021-42316

Microsoft Dynamics 365 On-Premises Remote Code Execution...

8.8CVSS

9.3AI Score

0.013EPSS

2021-11-10 01:19 AM

62

cve

CVE-2021-41354

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

5.4CVSS

5.7AI Score

0.001EPSS

2021-10-13 01:15 AM

56

cve

CVE-2021-41353

Microsoft Dynamics 365 (on-premises) Spoofing...

5.4CVSS

5.8AI Score

0.001EPSS

2021-10-13 01:15 AM

52

cve

CVE-2021-36950

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

5.4CVSS

6.2AI Score

0.001EPSS

2021-08-12 06:15 PM

65

cve

CVE-2021-34524

Microsoft Dynamics 365 On-Premises Remote Code Execution...

8.1CVSS

8.1AI Score

0.007EPSS

2021-08-12 06:15 PM

67

3

cve

CVE-2021-24101

Microsoft Dataverse Information Disclosure...

6.5CVSS

6AI Score

0.014EPSS

2021-02-25 11:15 PM

53

3

cve

CVE-2020-17147

Dynamics CRM Webclient Cross-site Scripting...

8.7CVSS

8.3AI Score

0.001EPSS

2020-12-10 12:15 AM

69

cve

CVE-2020-17018

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

5.4CVSS

5.2AI Score

0.001EPSS

2020-11-11 07:15 AM

47

cve

CVE-2020-17021

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

5.4CVSS

5.2AI Score

0.001EPSS

2020-11-11 07:15 AM

59

cve

CVE-2020-17005

Microsoft Dynamics 365 (on-premises) Cross-site Scripting...

5.4CVSS

5.2AI Score

0.001EPSS

2020-11-11 07:15 AM

44

cve

CVE-2020-16978

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics.....

5.4CVSS

5.2AI Score

0.001EPSS

2020-10-16 11:15 PM

101

cve

CVE-2020-16956

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics.....

5.4CVSS

5.2AI Score

0.001EPSS

2020-10-16 11:15 PM

105

cve

CVE-2020-16859

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics.....

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

44

cve

CVE-2020-16862

A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account......

7.1CVSS

7.5AI Score

0.039EPSS

2020-09-11 05:15 PM

54

cve

CVE-2020-16864

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics.....

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

39

cve

CVE-2020-16878

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics.....

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

53

cve

CVE-2020-16872

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics.....

7.6CVSS

6.8AI Score

0.001EPSS

2020-09-11 05:15 PM

42

cve

CVE-2020-16871

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics.....

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

46

cve

CVE-2020-16861

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics.....

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

41

cve

CVE-2020-16860

A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account......

6.8CVSS

7.4AI Score

0.043EPSS

2020-09-11 05:15 PM

48

cve

CVE-2020-16858

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics.....

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

45

cve

CVE-2020-1591

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics.....

5.4CVSS

5.5AI Score

0.001EPSS

2020-08-17 07:15 PM

49

cve

CVE-2019-1229

An elevation of privilege vulnerability exists in Dynamics On-Premise v9. An attacker who successfully exploited the vulnerability could leverage a customizer privilege within Dynamics to gain control of the Web Role hosting the Dynamics installation. To exploit this vulnerability, an attacker...

8.8CVSS

8.6AI Score

0.001EPSS

2019-08-14 09:15 PM

56