CVE-2023-35621

CVE-2023-35621 is a Denial-of-Service vulnerability affecting Microsoft Dynamics 365 for Finance and Operations (on‑premises). The issue is exposed over the network and can be triggered remotely to impact availability; CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5, HIGH). Connect...

CVE-2023-36020

CVE-2023-36020 is a cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises). Connected sources confirm an XSS flaw that can be exploited remotely to spoof the user interface, affecting Microsoft Dynamics 365 (on-premises) versions 9.0 and 9.1 (and related Platform/Finance & Ope...

CVE-2023-36020 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Service Update 0.51 for Microsoft Dynamics CRM (on-premises) 9.0

None None...

Service Update 1.23 for Microsoft Dynamics CRM (on-premises) 9.1

None None...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Security Updates for Microsoft Dynamics 365 (on-premises) (December 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services. CVE-2023-35621 - A sessio...

PT-2023-7710 · Microsoft · Dynamics 365 For Finance/Operations

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 Finance and Operations affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Dynamics 365 for Finance and Operations, which can be exploited by a remote attacker...

KLA62387 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premises can be exploit...

Microsoft Dynamics 365 安全漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A denial of service vulnerability exists in Microsoft Dynamics 365 for Finance and...

Microsoft Dynamics 365 安全漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

PT-2023-8052 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to conduct a cross-site scripting...

The vulnerability of the Microsoft Dynamics 365 resource planning software server arises from the lack of security measures taken to protect the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software server exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack remotely...

The vulnerability of the customer feedback management application of Microsoft Dynamics 365, related to errors in information presentation on the user interface, allows attackers to perform spoofing attacks.

The vulnerability of the customer feedback management application of Microsoft Dynamics 365 involves information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to perform a spoofing attack remotely...

The vulnerability of the Dynamics server software for resource planning in Microsoft Dynamics 365 allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Dynamics resource planning software for Microsoft Dynamics 365 is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the lack of protective measures for the website structure, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-00199)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-00198)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

Microsoft Dynamics 365 Sales Spoofing Vulnerability

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A spoofing vulnerability exists in Microsoft Dynamics 365 Sales. An attacker could...