CVE-2023-35335 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-35335 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-35335

CVE-2023-35335 affects Microsoft Dynamics 365 (on‑premises) and is a Cross‑site Scripting vulnerability (XSS). The NVD/MSR describe a network‑accessible issue with user interaction required, CVSS v3.1 base score 8.2 (High) and a changelog indicating a security fix in Microsoft Dynamics updates. C...

KLA50770 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premises can be exploited remotely to spoof user...