Security Updates for Microsoft Dynamics 365 (on-premises) (October 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2023-36429

Microsoft Dynamics 365 On-Premises Information Disclosure Vulnerability...

CVE-2023-36433

Microsoft Dynamics 365 On-Premises Information Disclosure Vulnerability...

CVE-2023-36416

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-36416

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-36429

Microsoft Dynamics 365 On-Premises Information Disclosure Vulnerability...

Information disclosure

Microsoft Dynamics 365 On-Premises Information Disclosure Vulnerability...

Information disclosure

Microsoft Dynamics 365 On-Premises Information Disclosure Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-36416 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-36416 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-36416

CVE-2023-36416 is a Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability affecting the web UI. Public sources describe an XSS flaw that could allow an attacker to steal cookie-based authentication credentials or spoof the user interface. CVSS v3.1 indicates network access with ...

CVE-2023-36429

CVE-2023-36429 affects Microsoft Dynamics 365 (On-Premises). It is an information-disclosure vulnerability in the Dynamics 365 On-Premises deployment that could allow an attacker to obtain sensitive information. According to the CVE metrics, it has CVSS v3.1 base score 6.5 (Medium) with a Network...

CVE-2023-36429 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2023-36429 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2023-36433 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2023-36433 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2023-36433

CVE-2023-36433 affects Microsoft Dynamics 365 (on-premises) 9.0 and 9.1 with an information-disclosure vulnerability. Root cause details are not fully specified in the provided documents, but the impact is access to sensitive data. CVSSv3.1 metrics: Network attack, low complexity, user interactio...

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

Service Update 1.18 for Microsoft Dynamics CRM (on-premises) 9.1

None None...