CVE-2020-16860

CVE-2020-16860 affects Microsoft Dynamics 365 (on-premises). It describes a remote code execution vulnerability where the server fails to properly sanitize web requests to the Dynamics server, potentially allowing an authenticated attacker to run arbitrary code in the context of the SQL service a...

KLA11953 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics 365. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 On-Premise can be...