CVE-2023-36800

Dynamics Finance and Operations Cross-site Scripting Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Cross site scripting

Dynamics Finance and Operations Cross-site Scripting Vulnerability...

CVE-2023-36800 Dynamics Finance and Operations Cross-site Scripting Vulnerability

...

CVE-2023-36800

CVE-2023-36800 is an XSS vulnerability affecting Microsoft Dynamics 365 (on-premises) / Dynamics 365 for Finance and Operations (on-premises) — specifically versions 9.0 and 9.1. The root cause is described as insufficient protection of the web page structure, enabling remote exploitation to spoo...

CVE-2023-36800 Dynamics Finance and Operations Cross-site Scripting Vulnerability

...

CVE-2023-38164 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-38164 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-38164

CVE-2023-38164 is a cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises) . The NVD/CNA data indicate a network-exposed issue where the attacker can compromise browser context via XSS, with user interaction required. The impact is mainly on confidentiality (HIGH in CNA metric...

CVE-2023-36886 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-36886 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-36886

CVE-2023-36886 applies to Microsoft Dynamics 365 (on-premises) and is a cross-site scripting vulnerability in the on-premises deployment. Connected sources corroborate this as the same CVE and identify affected Dynamics 365 on-premises products. Microsoft published fixes via Service Update 1.21 f...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Dynamics Finance and Operations Cross-site Scripting Vulnerability

...

Vulnerabilities fixed in Microsoft Dynamics

Microsoft has fixed vulnerabilities in Dynamics and Dynamics Finance & Operations. A malicious person could exploit them to launch a Cross-Site Scripting attack. Such an attack can lead to execution of arbitrary code in the victim's browser, or access to sensitive data in the context of the...

Microsoft Dynamics 365 跨站脚本漏洞

Microsoft Dynamics 365 on-premises is a set of intelligent business applications from Microsoft Corporation USA that help you run your overall business and achieve better results through predictive AI-driven insights. A cross-site scripting vulnerability exists in Microsoft Dynamics 365...

PT-2023-5000 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to insufficient protection of the web page structure, allowing for cross-site scripting attacks. An attacker could exploit this to perform...

PT-2023-5142 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to conduct cross-site scripting...

Microsoft Dynamics Finance & Operations Cross-Site Scripting Vulnerability

Microsoft Dynamics Finance & Operations is an application from Microsoft Corporation USA. A Finance & Operations program. A security vulnerability exists in Microsoft Dynamics Finance & Operations. An attacker could exploit this vulnerability to perform cross-site scripting attacks...