CVE-2023-36433

CVE-2023-36433 affects Microsoft Dynamics 365 (on-premises) 9.0 and 9.1 with an information-disclosure vulnerability. Root cause details are not fully specified in the provided documents, but the impact is access to sensitive data. CVSSv3.1 metrics: Network attack, low complexity, user interactio...

CVE-2023-36433 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2023-36433 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

Service Update 0.49 for Microsoft Dynamics CRM (on-premises) 9.0

None None...

Service Update 0.47 for Microsoft Dynamics 365 9.0

None None...

Service Update 1.21 for Microsoft Dynamics CRM (on-premises) 9.1

None None...

Service Update 1.18 for Microsoft Dynamics CRM (on-premises) 9.1

None None...

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

Service Update 1.22 for Microsoft Dynamics CRM (on-premises) 9.1

None None...

Service Update 0.50 for Microsoft Dynamics CRM (on-premises) 9.0

None None...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

PT-2023-5959 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 affected versions not specified Description: The issue is related to insufficient protection of service data in Microsoft Dynamics 365, which can be exploited by a remote attacker to gain unauthorized access to protecte...

Microsoft Dynamics 365 安全漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. An information disclosure vulnerability exists in Microsoft Dynamics 365...

Microsoft Dynamics 365 跨站脚本漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. Microsoft Dynamics 365 on-premises cross-site scripting vulnerability can be...

PT-2023-5978 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to conduct cross-site scripting...

KLA61356 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in Microsoft Common Data...

PT-2023-5976 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to insufficient protection of service data in Microsoft Dynamics 365, which can allow a remote attacker to gain unauthorized access to...

Microsoft Dynamics 365 安全漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. An information disclosure vulnerability exists in Microsoft Dynamics 365...

Vulnerabilities fixed in Microsoft Dynamics

Microsoft has fixed vulnerabilities in Dynamics. A malicious party could exploit the vulnerabilities to launch a cross-site scripting attack, to gain access to sensitive data or to perform a denial-of-service. Microsoft Common Data Model SDK:...