CVE-2024-21393 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2024-21394 Dynamics 365 Field Service Spoofing Vulnerability

...

CVE-2024-21389 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2024-21389 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2024-21389

CVE-2024-21389 is a cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises). The incident affects the on‑premises deployment (noted in multiple sources) and is classified with CVSSv3.1 base score 7.6 (HIGH) with network access, low attack complexity, user interaction required, ...

CVE-2024-21327

CVE-2024-21327 is a Cross-Site Scripting vulnerability in Microsoft Dynamics 365 Customer Engagement (on-premises and related deployments). The NVD/NCSC/NASES sources indicate an XSS risk that can affect Dynamics 365 Customer Engagement V9.1 and Dynamics 365 on-premises 9.1, with Microsoft noting...

CVE-2024-21327 Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

...

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Dynamics 365 Sales Spoofing Vulnerability

...

Update 21.16 for Microsoft Dynamics 365 Business Central (on-premises) 2022 Release Wave 2 (Application Build 21.16.63199, Platform Build 21.0.63175)

None None...

Service Update 1.25 for Microsoft Dynamics CRM (on-premises) 9.1

None None...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Dynamics 365 Sales Spoofing Vulnerability

...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Update 23.4 for Microsoft Dynamics 365 Business Central 2023 Release Wave 2 (Application Build 23.4.15715, Platform Build 23.0.15712)

None None...

Update 22.10 for Microsoft Dynamics 365 Business Central 2023 Release Wave 1 (Application Build 22.10.63195, Platform Build 22.0.63124)

None None...

Dynamics 365 Field Service Spoofing Vulnerability

...

PT-2024-1865 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to a lack of protection measures for the web page structure in Microsoft Dynamics 365, allowing for cross-site scripting attacks. An attacker...

Microsoft Dynamics 安全漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...