CVE-2020-16859

Summary for CVE-2020-16859 (Microsoft Dynamics 365 on-premises): A cross‑site scripting vulnerability arises from improper sanitization of a crafted web request to Dynamics Server. An authenticated attacker could trigger XSS in the user’s browser, running scripts in the context of the logged‑in u...

KLA11953 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics 365. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 On-Premise can be...