Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline

Dynamics 365 Security Vulnerabilities - 2020

cve
cve

CVE-2018-8654

An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Server, aka 'Microsoft Dynamics 365 Elevation of Privilege Vulnerability'.

6.5CVSS

6.4AI Score

0.001EPSS

2020-01-24 09:15 PM
53
cve
cve

CVE-2020-0656

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

5.4CVSS

5AI Score

0.001EPSS

2020-01-14 11:15 PM
69
cve
cve

CVE-2020-0905

An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.

8CVSS

8AI Score

0.024EPSS

2020-03-12 04:15 PM
81
cve
cve

CVE-2020-1018

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a masked...

7.5CVSS

7AI Score

0.009EPSS

2020-04-15 03:15 PM
84
cve
cve

CVE-2020-1022

A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.

8CVSS

8AI Score

0.024EPSS

2020-04-15 03:15 PM
61
cve
cve

CVE-2020-1049

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'. This CVE ID is unique from CVE-2020-1050.

5.4CVSS

5.5AI Score

0.001EPSS

2020-04-15 03:15 PM
52
cve
cve

CVE-2020-1050

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'. This CVE ID is unique from CVE-2020-1049.

6.1CVSS

5.5AI Score

0.001EPSS

2020-04-15 03:15 PM
57
cve
cve

CVE-2020-1063

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

5.4CVSS

5.2AI Score

0.001EPSS

2020-05-21 11:15 PM
54
cve
cve

CVE-2020-1182

A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server.An authenticated attacker...

7.3CVSS

8AI Score

0.02EPSS

2020-08-17 07:15 PM
66
cve
cve

CVE-2020-1591

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics s...

5.4CVSS

5.5AI Score

0.001EPSS

2020-08-17 07:15 PM
56
cve
cve

CVE-2020-16857

<p>A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server.</p><p>An authenticate...

7.1CVSS

7.5AI Score

0.005EPSS

2020-09-11 05:15 PM
49
cve
cve

CVE-2020-16858

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM
51
cve
cve

CVE-2020-16859

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM
50
cve
cve

CVE-2020-16860

<p>A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account...

6.8CVSS

7.4AI Score

0.032EPSS

2020-09-11 05:15 PM
55
cve
cve

CVE-2020-16861

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM
48
cve
cve

CVE-2020-16862

<p>A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account...

7.1CVSS

7.5AI Score

0.029EPSS

2020-09-11 05:15 PM
62
cve
cve

CVE-2020-16864

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM
45
cve
cve

CVE-2020-16871

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM
52
cve
cve

CVE-2020-16872

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

7.6CVSS

6.8AI Score

0.001EPSS

2020-09-11 05:15 PM
48
cve
cve

CVE-2020-16878

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM
59
cve
cve

CVE-2020-16943

<p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who successfully exploited this vulnerability could update data without proper authorization.</p><p>To exploit the vulnerability, an attacker would need to send a specially crafted requ...

6.5CVSS

6.3AI Score

0.001EPSS

2020-10-16 11:15 PM
123
cve
cve

CVE-2020-16956

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.2AI Score

0.001EPSS

2020-10-16 11:15 PM
112
cve
cve

CVE-2020-16978

<p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.2AI Score

0.001EPSS

2020-10-16 11:15 PM
107
cve
cve

CVE-2020-17005

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

5.2AI Score

0.001EPSS

2020-11-11 07:15 AM
49
cve
cve

CVE-2020-17018

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

5.2AI Score

0.001EPSS

2020-11-11 07:15 AM
54
cve
cve

CVE-2020-17021

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

5.2AI Score

0.001EPSS

2020-11-11 07:15 AM
63
cve
cve

CVE-2020-17147

Dynamics CRM Webclient Cross-site Scripting Vulnerability

8.7CVSS

8.3AI Score

0.001EPSS

2020-12-10 12:15 AM
77
cve
cve

CVE-2020-17152

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

8.8CVSS

8.8AI Score

0.018EPSS

2020-12-10 12:15 AM
101
3
cve
cve

CVE-2020-17158

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

8.8CVSS

8.8AI Score

0.018EPSS

2020-12-10 12:15 AM
101
3