The software for resource planning in Microsoft Dynamics 365 is vulnerable due to the lack of security measures taken to protect the website structure. This vulnerability allows attackers to perform cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-00200)

Microsoft Dynamics 365 on-premises is a set of intelligent business applications from Microsoft Corporation USA that help you run your overall business and achieve better results through predictive AI-driven insights. A cross-site scripting vulnerability exists in Microsoft Dynamics 365...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-00201)

Microsoft Dynamics 365 on-premises is a set of intelligent business applications from Microsoft Corporation USA that help you run your overall business and achieve better results through predictive AI-driven insights. A cross-site scripting vulnerability exists in Microsoft Dynamics 365...

The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Security Updates for Microsoft Dynamics 365 (on-premises) (September 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple Cross-site Scripting vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

CVE-2023-38164

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-38164

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-36886

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-36886

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-36800

Dynamics Finance and Operations Cross-site Scripting Vulnerability...

CVE-2023-36800

Dynamics Finance and Operations Cross-site Scripting Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Cross site scripting

Dynamics Finance and Operations Cross-site Scripting Vulnerability...

CVE-2023-36800 Dynamics Finance and Operations Cross-site Scripting Vulnerability

...

CVE-2023-36800

CVE-2023-36800 is an XSS vulnerability affecting Microsoft Dynamics 365 (on-premises) / Dynamics 365 for Finance and Operations (on-premises) — specifically versions 9.0 and 9.1. The root cause is described as insufficient protection of the web page structure, enabling remote exploitation to spoo...

CVE-2023-36800 Dynamics Finance and Operations Cross-site Scripting Vulnerability

...

CVE-2023-38164 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-38164

CVE-2023-38164 is a cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises) . The NVD/CNA data indicate a network-exposed issue where the attacker can compromise browser context via XSS, with user interaction required. The impact is mainly on confidentiality (HIGH in CNA metric...