CVE-2026-40371

Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 on-premises allows an authorized attacker to elevate privileges over a network...

CVE-2026-42833

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Improper access control in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information locally...

CVE-2025-58112

Microsoft Dynamics 365 Customer Engagement on-premises 1612 9.0.2.3034 allows the generation of customized reports via raw SQL queries in an upload of a .rdl Report Definition Language file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting...

CVE-2024-38211

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

PT-2024-4972 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to improper authorization in the local software tool for resource planning in Microsoft Dynamics 365 On-Premises. Exploitation of this issue...

CVE-2023-36031

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-35335

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-28309

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Microsoft Dynamics 跨站脚本漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. The following products and...

CVE-2023-21807

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-21573

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

PT-2022-2665 · Microsoft · Dynamics 365 On-Premises

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Dynamics 365. Exploitation of this issue may allow an attacker to execute arbitrary code...

CVE-2022-21957

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

Microsoft Dynamics 365 跨站脚本漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics. The following...

CVE-2021-36950

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

PT-2020-4708 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to conduct cross-site scripting XSS...

PT-2020-4388 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: A cross-site scripting issue exists due to improper sanitization of specially crafted web requests. An authenticated attacker could exploit this by sending a...

CVE-2020-16864

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

CVE-2020-16861

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...