CVE-2020-16861 Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

...

CVE-2020-16861

The CVE-2020-16861 entry describes a cross-site scripting (XSS) vulnerability in Microsoft Dynamics 365 (on‑premises) caused by improper sanitization of a crafted web request. An authenticated attacker could exploit this to run scripts in the current user’s browser, read restricted content, imper...

KLA11953 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics 365. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 On-Premise can be...