CVE-2020-16858

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

CVE-2019-1302

An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'...

PT-2019-2376

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description A cross-site scripting issue exists due to the improper sanitization of specially crafted web requests. This could allow an authenticated attacker to send a crafted reques...

PT-2018-2035

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics NAV affected versions not specified Description A cross-site scripting issue exists due to inadequate protection of the web page structure. This can allow a remote attacker to perform cross-site scripting attacks with elevat...