Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Spoofing

Dynamics 365 Sales Spoofing Vulnerability...

Information disclosure

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability...

Spoofing

Dynamics 365 Sales Spoofing Vulnerability...

CVE-2024-21395

CVE-2024-21395 is a cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises). The linked CNVD/CNNVD entries describe exploitation to steal cookie-based credentials and, per ENISA/NCSC advisories, affects Dynamics 365 on-premises with multiple related CVEs. The vulnerability is b...

CVE-2024-21395 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2024-21395 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2024-21380

CVE-2024-21380 is a Microsoft Dynamics 365 Business Central/NAV information disclosure vulnerability. The CVSS v3.1 score is 8.0 (Network, high attack complexity; privileges required: Low; user interaction required; changed scope). It can lead to access to sensitive data and potential data integr...

CVE-2024-21380 Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

...

CVE-2024-21380 Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

...

CVE-2024-21328 Dynamics 365 Sales Spoofing Vulnerability

...

CVE-2024-21328

The CVE-2024-21328 entry concerns a spoofing vulnerability in Microsoft Dynamics 365 on-premises, specifically affecting the Dynamics 365 Sales component. Publicly connected documents indicate the issue can enable an attacker to spoof the user interface or pretend to be another user, with indicat...

CVE-2024-21328 Dynamics 365 Sales Spoofing Vulnerability

...

CVE-2024-21396 Dynamics 365 Sales Spoofing Vulnerability

...

CVE-2024-21396 Dynamics 365 Sales Spoofing Vulnerability

...

CVE-2024-21396

CVE-2024-21396 is a spoofing vulnerability in Microsoft Dynamics 365 Sales (on‑premises), enabling pre‑authentication user spoofing. Multiple sources (NCSC mapping, Nessus plugin) describe a network‑accessible issue with high impact on confidentiality and a required user interaction for exploitat...

CVE-2024-21394 Dynamics 365 Field Service Spoofing Vulnerability

...

CVE-2024-21394

CVE-2024-21394 is a spoofing vulnerability in Microsoft Dynamics 365 Field Service (on-premises) where an attacker can remotely spoof the user interface. The CVSS 3.1 vector indicates network access, low attack complexity, low privileges required, but user interaction is needed, with confidential...

CVE-2024-21393 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2024-21393

CVE-2024-21393 is a Microsoft Dynamics 365 (on-premises) Cross-site Scripting (XSS) vulnerability. The CVSSv3.1 vector indicates NETWORK attack vector, LOW attack complexity, LOW privileges required, user interaction is REQUIRED, and the impact on confidentiality is HIGH with no availability impa...