Security Updates for Microsoft Dynamics 365 (on-premises) (Oct 2021)

The Microsoft Dynamics 365 on-premises installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A spoofing vulnerability CVE-2021-41353 - A cross-site scripting vulnerability CVE-2021-41354 Note that Nessus has not tested for these...

CVE-2021-41354 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2021-41354

CVE-2021-41354 is a Microsoft Dynamics 365 (on-premises) Cross-site Scripting vulnerability. The connected sources confirm the vulnerability affects Dynamics 365 (on-premises) and classify it as a cross-site scripting issue with CVSS 3.1 base score 5.4 (MEDIUM), vector: NETWORK, high-level impact...