CVE-2024-21395 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2024-21395

CVE-2024-21395 is a cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises). The linked CNVD/CNNVD entries describe exploitation to steal cookie-based credentials and, per ENISA/NCSC advisories, affects Dynamics 365 on-premises with multiple related CVEs. The vulnerability is b...

KLA63963 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microso...