Dynamics 365 Security Vulnerabilities and Issues — Dynamics 365 CVE List

cve

CVE-2018-8605

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft ...

5.4CVSS

5.2AI Score

0.002EPSS

2018-11-14 01:29 AM

49

cve

CVE-2018-8606

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft ...

5.4CVSS

5.2AI Score

0.002EPSS

2018-11-14 01:29 AM

44

cve

CVE-2018-8607

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft ...

5.4CVSS

5.2AI Score

0.002EPSS

2018-11-14 01:29 AM

37

cve

CVE-2018-8608

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft ...

5.4CVSS

5.2AI Score

0.002EPSS

2018-11-14 01:29 AM

41

cve

CVE-2018-8609

A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Remote Code Execution Vulnerability." This affects Microsoft Dyn...

8.8CVSS

9.2AI Score

0.024EPSS

2018-11-14 01:29 AM

57

cve

CVE-2018-8654

An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Server, aka 'Microsoft Dynamics 365 Elevation of Privilege Vulnerability'.

6.5CVSS

6.4AI Score

0.001EPSS

2020-01-24 09:15 PM

53

cve

CVE-2019-1008

A security feature bypass vulnerability exists in Dynamics On Premise, aka 'Microsoft Dynamics On-Premise Security Feature Bypass'.

5.9CVSS

5.6AI Score

0.001EPSS

2019-05-16 07:29 PM

78

cve

CVE-2019-1229

An elevation of privilege vulnerability exists in Dynamics On-Premise v9. An attacker who successfully exploited the vulnerability could leverage a customizer privilege within Dynamics to gain control of the Web Role hosting the Dynamics installation.To exploit this vulnerability, an attacker needs...

8.8CVSS

8.6AI Score

0.001EPSS

2019-08-14 09:15 PM

65

cve

CVE-2019-1375

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

5.4CVSS

5AI Score

0.001EPSS

2019-10-10 02:15 PM

48

cve

CVE-2020-0656

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

5.4CVSS

5AI Score

0.001EPSS

2020-01-14 11:15 PM

69

cve

CVE-2020-0905

An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.

8CVSS

8AI Score

0.024EPSS

2020-03-12 04:15 PM

81

cve

CVE-2020-1018

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a masked...

7.5CVSS

7AI Score

0.009EPSS

2020-04-15 03:15 PM

85

cve

CVE-2020-1022

A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.

8CVSS

8AI Score

0.024EPSS

2020-04-15 03:15 PM

61

cve

CVE-2020-1049

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'. This CVE ID is unique from CVE-2020-1050.

5.4CVSS

5.5AI Score

0.001EPSS

2020-04-15 03:15 PM

52

cve

CVE-2020-1050

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'. This CVE ID is unique from CVE-2020-1049.

6.1CVSS

5.5AI Score

0.001EPSS

2020-04-15 03:15 PM

57

cve

CVE-2020-1063

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

5.4CVSS

5.2AI Score

0.001EPSS

2020-05-21 11:15 PM

54

cve

CVE-2020-1182

A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server.An authenticated attacker...

7.3CVSS

8AI Score

0.02EPSS

2020-08-17 07:15 PM

66

cve

CVE-2020-1591

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics s...

5.4CVSS

5.5AI Score

0.001EPSS

2020-08-17 07:15 PM

56

cve

CVE-2020-16857

A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server.An authenticate...

7.1CVSS

7.5AI Score

0.005EPSS

2020-09-11 05:15 PM

49

cve

CVE-2020-16858

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

52

cve

CVE-2020-16859

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

50

cve

CVE-2020-16860

A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account...

6.8CVSS

7.4AI Score

0.032EPSS

2020-09-11 05:15 PM

55

cve

CVE-2020-16861

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

48

cve

CVE-2020-16862

A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account...

7.1CVSS

7.5AI Score

0.029EPSS

2020-09-11 05:15 PM

62

cve

CVE-2020-16864

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

46

cve

CVE-2020-16871

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

52

cve

CVE-2020-16872

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

7.6CVSS

6.8AI Score

0.001EPSS

2020-09-11 05:15 PM

49

cve

CVE-2020-16878

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.7AI Score

0.001EPSS

2020-09-11 05:15 PM

59

cve

CVE-2020-16943

An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who successfully exploited this vulnerability could update data without proper authorization.To exploit the vulnerability, an attacker would need to send a specially crafted requ...

6.5CVSS

6.3AI Score

0.001EPSS

2020-10-16 11:15 PM

123

cve

CVE-2020-16956

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.2AI Score

0.001EPSS

2020-10-16 11:15 PM

113

cve

CVE-2020-16978

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamic...

5.4CVSS

5.2AI Score

0.001EPSS

2020-10-16 11:15 PM

107

cve

CVE-2020-17005

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

5.2AI Score

0.001EPSS

2020-11-11 07:15 AM

49

cve

CVE-2020-17018

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

5.2AI Score

0.001EPSS

2020-11-11 07:15 AM

54

cve

CVE-2020-17021

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

5.2AI Score

0.001EPSS

2020-11-11 07:15 AM

63

cve

CVE-2020-17147

Dynamics CRM Webclient Cross-site Scripting Vulnerability

8.7CVSS

8.3AI Score

0.001EPSS

2020-12-10 12:15 AM

77

cve

CVE-2020-17152

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

8.8CVSS

8.8AI Score

0.018EPSS

2020-12-10 12:15 AM

101

3

cve

CVE-2020-17158

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

8.8CVSS

8.8AI Score

0.018EPSS

2020-12-10 12:15 AM

101

3

cve

CVE-2021-24101

Microsoft Dataverse Information Disclosure Vulnerability

6.5CVSS

6AI Score

0.015EPSS

2021-02-25 11:15 PM

63

3

cve

CVE-2021-28461

Dynamics Finance and Operations Cross-site Scripting Vulnerability

6.1CVSS

6.1AI Score

0.001EPSS

2021-05-11 07:15 PM

76

cve

CVE-2021-34524

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

8.1CVSS

8.1AI Score

0.007EPSS

2021-08-12 06:15 PM

77

3

cve

CVE-2021-36950

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

6.2AI Score

0.001EPSS

2021-08-12 06:15 PM

77

cve

CVE-2021-40457

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

7.4CVSS

6.8AI Score

0.009EPSS

2021-10-13 01:15 AM

56

cve

CVE-2021-41353

Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability

5.4CVSS

5.8AI Score

0.001EPSS

2021-10-13 01:15 AM

61

cve

CVE-2021-41354

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS

5.7AI Score

0.001EPSS

2021-10-13 01:15 AM

65

cve

CVE-2021-42316

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

8.8CVSS

9.3AI Score

0.013EPSS

2021-11-10 01:19 AM

74

cve

CVE-2022-21932

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

7.6CVSS

5.9AI Score

0.001EPSS

2022-01-11 09:15 PM

67

cve

CVE-2022-21957

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

7.2CVSS

7.6AI Score

0.013EPSS

2022-02-09 05:15 PM

180

cve

CVE-2022-23259

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

8.8CVSS

9.2AI Score

0.007EPSS

2022-04-15 07:15 PM

152

cve

CVE-2022-34700

Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability

8.8CVSS

9.2AI Score

0.009EPSS

2022-09-13 07:15 PM

63

10

cve

CVE-2022-35805

Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability

8.8CVSS

9.2AI Score

0.01EPSS

2022-09-13 07:15 PM

74

9