Security Updates for Microsoft Dynamics 365 (on-premises) (KB5032297) (November 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

CVE-2023-36031

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-36031

CVE-2023-36031 is a Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability affecting Dynamics 365 on-premises versions 9.x (notably 9.0/9.1). The root cause is an XSS flaw allowing remote exploitation that could spoof UI or expose sensitive information. Microsoft outlines service...

KLA61976 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premises can be exploited remotely to spoof user...