CVE-2023-35335 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-35335

CVE-2023-35335 affects Microsoft Dynamics 365 (on‑premises) and is a Cross‑site Scripting vulnerability (XSS). The NVD/MSR describe a network‑accessible issue with user interaction required, CVSS v3.1 base score 8.2 (High) and a changelog indicating a security fix in Microsoft Dynamics updates. C...

CVE-2023-35335 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

KLA50770 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premises can be exploited remotely to spoof user...