CVE-2023-36800 Dynamics Finance and Operations Cross-site Scripting Vulnerability

...

CVE-2023-36800 Dynamics Finance and Operations Cross-site Scripting Vulnerability

...

CVE-2023-36800

CVE-2023-36800 is an XSS vulnerability affecting Microsoft Dynamics 365 (on-premises) / Dynamics 365 for Finance and Operations (on-premises) — specifically versions 9.0 and 9.1. The root cause is described as insufficient protection of the web page structure, enabling remote exploitation to spoo...