Cross site scripting

Cross-site scripting XSS vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Dynamics AX Enterprise Portal XSS Vulnerability."...

CVE-2012-1857

CVE-2012-1857 describes a cross-site scripting (XSS) vulnerability in the Enterprise Portal component of Microsoft Dynamics AX 2012. An attacker could craft a URL to cause arbitrary script/HTML execution in a victim’s browser. Affected product: Dynamics AX 2012 Enterprise Portal; vulnerability tr...