CVE-2024-21380

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability...

CVE-2024-21327

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...

CVE-2024-21328

Dynamics 365 Sales Spoofing Vulnerability...

CVE-2024-21327

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...

CVE-2024-21328

Dynamics 365 Sales Spoofing Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Spoofing

Dynamics 365 Field Service Spoofing Vulnerability...

Cross site scripting

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...

Spoofing

Dynamics 365 Sales Spoofing Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Spoofing

Dynamics 365 Sales Spoofing Vulnerability...

Information disclosure

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability...

CVE-2024-21395 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2024-21395

CVE-2024-21395 is a cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises). The linked CNVD/CNNVD entries describe exploitation to steal cookie-based credentials and, per ENISA/NCSC advisories, affects Dynamics 365 on-premises with multiple related CVEs. The vulnerability is b...

CVE-2024-21395 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2024-21380

CVE-2024-21380 is a Microsoft Dynamics 365 Business Central/NAV information disclosure vulnerability. The CVSS v3.1 score is 8.0 (Network, high attack complexity; privileges required: Low; user interaction required; changed scope). It can lead to access to sensitive data and potential data integr...

CVE-2024-21380 Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

...

CVE-2024-21380 Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

...

CVE-2024-21328

The CVE-2024-21328 entry concerns a spoofing vulnerability in Microsoft Dynamics 365 on-premises, specifically affecting the Dynamics 365 Sales component. Publicly connected documents indicate the issue can enable an attacker to spoof the user interface or pretend to be another user, with indicat...