3635 matches found
CVE-2024-21396 Dynamics 365 Sales Spoofing Vulnerability
...
CVE-2024-21396 Dynamics 365 Sales Spoofing Vulnerability
...
CVE-2024-21396
CVE-2024-21396 is a spoofing vulnerability in Microsoft Dynamics 365 Sales (on‑premises), enabling pre‑authentication user spoofing. Multiple sources (NCSC mapping, Nessus plugin) describe a network‑accessible issue with high impact on confidentiality and a required user interaction for exploitat...
CVE-2024-21393
CVE-2024-21393 is a Microsoft Dynamics 365 (on-premises) Cross-site Scripting (XSS) vulnerability. The CVSSv3.1 vector indicates NETWORK attack vector, LOW attack complexity, LOW privileges required, user interaction is REQUIRED, and the impact on confidentiality is HIGH with no availability impa...
CVE-2024-21393 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
CVE-2024-21394
CVE-2024-21394 is a spoofing vulnerability in Microsoft Dynamics 365 Field Service (on-premises) where an attacker can remotely spoof the user interface. The CVSS 3.1 vector indicates network access, low attack complexity, low privileges required, but user interaction is needed, with confidential...
CVE-2024-21393 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
CVE-2024-21394 Dynamics 365 Field Service Spoofing Vulnerability
...
CVE-2024-21394 Dynamics 365 Field Service Spoofing Vulnerability
...
CVE-2024-21389 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
CVE-2024-21389 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
CVE-2024-21389
CVE-2024-21389 is a cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises). The incident affects the on‑premises deployment (noted in multiple sources) and is classified with CVSSv3.1 base score 7.6 (HIGH) with network access, low attack complexity, user interaction required, ...
CVE-2024-21327 Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
...
CVE-2024-21327
CVE-2024-21327 is a Cross-Site Scripting vulnerability in Microsoft Dynamics 365 Customer Engagement (on-premises and related deployments). The NVD/NCSC/NASES sources indicate an XSS risk that can affect Dynamics 365 Customer Engagement V9.1 and Dynamics 365 on-premises 9.1, with Microsoft noting...
Update 21.16 for Microsoft Dynamics 365 Business Central (on-premises) 2022 Release Wave 2 (Application Build 21.16.63199, Platform Build 21.0.63175)
None None...
Update 23.4 for Microsoft Dynamics 365 Business Central 2023 Release Wave 2 (Application Build 23.4.15715, Platform Build 23.0.15712)
None None...
Update 22.10 for Microsoft Dynamics 365 Business Central 2023 Release Wave 1 (Application Build 22.10.63195, Platform Build 22.0.63124)
None None...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...