The vulnerability of the Microsoft Dynamics 365 Customer Voice application’s feedback management application lies in the insufficient protection of its web page structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the customer feedback management application of Microsoft Dynamics 365 is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Security Updates for Microsoft Dynamics 365 (on-premises) (April 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple session spoofing vulnerabilities. An attacker can exploit these to perform actions with the privileges of another user. Note that Nessus has not tested for these issues but has instead relie...

CVE-2023-28314

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-28314

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-28313

Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability...

CVE-2023-28313

Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability...

CVE-2023-28309

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-28309

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Cross site scripting

Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability...

CVE-2023-28314

Microsoft Dynamics 365 (on-premises) contains a Cross-site Scripting vulnerability tracked as CVE-2023-28314 affecting Dynamics 365 (on-premises) versions 9.0 and 9.1. Exploitation could allow an attacker to execute code in the victim’s browser context and potentially access sensitive data (per E...

CVE-2023-28314 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-28314 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-28309 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-28309 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-28313 Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability

...

CVE-2023-28309

CVE-2023-28309 affects Microsoft Dynamics 365 (on-premises) and is a Cross-site Scripting vulnerability. ENISA/NCSC notes it enables a remote attacker to exploit XSS to execute code in the victim’s browser and potentially access sensitive data; Attack vector is network with user interaction requi...

CVE-2023-28313

The CVE-2023-28313 entry covers a Cross-Site Scripting (XSS) vulnerability in Microsoft Dynamics 365 Customer Voice. Affected product: Microsoft Dynamics 365 Customer Voice (part of Dynamics suite). Description and connected records indicate an XSS flaw that can interfere with the web UI, enablin...