Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MicrosoftDynamics 365

89 matches found

CVE
CVE•added 2021/10/13 1:15 a.m.•78 views

CVE-2021-41353

Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability

5.4CVSS5.6AI score0.00419EPSS
CVE
CVE•added 2020/08/17 7:15 p.m.•77 views

CVE-2020-1591

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics s...

5.4CVSS5.2AI score0.00971EPSS
CVE
CVE•added 2020/09/11 5:15 p.m.•77 views

CVE-2020-16862

A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account.An...

8.8CVSS7.3AI score0.0426EPSS
CVE
CVE•added 2024/08/13 6:15 p.m.•77 views

CVE-2024-38211

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

8.2CVSS8AI score0.0027EPSS
CVE
CVE•added 2023/07/11 6:15 p.m.•76 views

CVE-2023-35335

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

8.2CVSS7.9AI score0.00225EPSS
CVE
CVE•added 2023/11/14 6:15 p.m.•75 views

CVE-2023-36030

Microsoft Dynamics 365 Sales Spoofing Vulnerability

6.1CVSS6.4AI score0.00228EPSS
CVE
CVE•added 2024/06/11 5:16 p.m.•75 views

CVE-2024-35263

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

5.7CVSS5.6AI score0.04051EPSS
CVE
CVE•added 2018/11/14 1:29 a.m.•73 views

CVE-2018-8609

A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Remote Code Execution Vulnerability." This affects Microsoft Dyn...

8.8CVSS9.2AI score0.3099EPSS
CVE
CVE•added 2020/05/21 11:15 p.m.•73 views

CVE-2020-1063

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

5.4CVSS5.2AI score0.01111EPSS
CVE
CVE•added 2020/09/11 5:15 p.m.•73 views

CVE-2020-16878

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics s...

5.4CVSS5.2AI score0.00416EPSS
CVE
CVE•added 2023/07/11 6:15 p.m.•72 views

CVE-2023-33171

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

8.2CVSS6.3AI score0.00253EPSS
CVE
CVE•added 2024/07/31 11:15 p.m.•71 views

CVE-2024-38182

Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network.

9.8CVSS9.2AI score0.02159EPSS
CVE
CVE•added 2021/10/13 1:15 a.m.•70 views

CVE-2021-40457

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

7.4CVSS6.9AI score0.0092EPSS
CVE
CVE•added 2020/01/24 9:15 p.m.•69 views

CVE-2018-8654

An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Server, aka 'Microsoft Dynamics 365 Elevation of Privilege Vulnerability'.

6.5CVSS6.4AI score0.05866EPSS
CVE
CVE•added 2020/09/11 5:15 p.m.•69 views

CVE-2020-16860

A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account.An...

8.8CVSS7.2AI score0.02924EPSS
CVE
CVE•added 2023/09/12 5:15 p.m.•69 views

CVE-2023-38164

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

7.6CVSS6.2AI score0.00248EPSS
CVE
CVE•added 2020/09/11 5:15 p.m.•67 views

CVE-2020-16858

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics s...

5.4CVSS5.3AI score0.00408EPSS
CVE
CVE•added 2023/09/12 5:15 p.m.•67 views

CVE-2023-36886

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

7.6CVSS6.2AI score0.00228EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•67 views

CVE-2024-30061

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

7.3CVSS7AI score0.05295EPSS
CVE
CVE•added 2020/11/11 7:15 a.m.•66 views

CVE-2020-17018

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS5.2AI score0.00684EPSS
CVE
CVE•added 2018/11/14 1:29 a.m.•65 views

CVE-2018-8605

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft ...

5.4CVSS5.2AI score0.00416EPSS
CVE
CVE•added 2019/10/10 2:15 p.m.•64 views

CVE-2019-1375

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

5.4CVSS5AI score0.00979EPSS
CVE
CVE•added 2020/09/11 5:15 p.m.•64 views

CVE-2020-16859

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics s...

5.4CVSS5.3AI score0.00408EPSS
CVE
CVE•added 2020/09/11 5:15 p.m.•64 views

CVE-2020-16871

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics s...

5.4CVSS5.2AI score0.00408EPSS
CVE
CVE•added 2020/09/11 5:15 p.m.•63 views

CVE-2020-16861

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics s...

5.4CVSS5.2AI score0.00551EPSS
CVE
CVE•added 2020/11/11 7:15 a.m.•63 views

CVE-2020-17005

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5.4CVSS5.2AI score0.00767EPSS
CVE
CVE•added 2023/12/12 6:15 p.m.•61 views

CVE-2023-35621

Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability

7.5CVSS7.5AI score0.00555EPSS
CVE
CVE•added 2018/11/14 1:29 a.m.•60 views

CVE-2018-8606

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft ...

5.4CVSS5.2AI score0.00416EPSS
CVE
CVE•added 2020/09/11 5:15 p.m.•60 views

CVE-2020-16872

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics s...

7.6CVSS6.9AI score0.00518EPSS
CVE
CVE•added 2018/11/14 1:29 a.m.•59 views

CVE-2018-8608

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft ...

5.4CVSS5.2AI score0.00416EPSS
CVE
CVE•added 2023/09/12 5:15 p.m.•59 views

CVE-2023-36800

Dynamics Finance and Operations Cross-site Scripting Vulnerability

7.6CVSS6.3AI score0.00228EPSS
CVE
CVE•added 2020/09/11 5:15 p.m.•58 views

CVE-2020-16864

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics s...

5.4CVSS5.3AI score0.00541EPSS
CVE
CVE•added 2023/10/10 6:15 p.m.•58 views

CVE-2023-36429

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

6.5CVSS6.4AI score0.01344EPSS
CVE
CVE•added 2023/10/10 6:15 p.m.•57 views

CVE-2023-36416

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

6.1CVSS6.2AI score0.00285EPSS
CVE
CVE•added 2018/11/14 1:29 a.m.•53 views

CVE-2018-8607

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft ...

5.4CVSS5.2AI score0.00416EPSS
CVE
CVE•added 2024/09/10 5:15 p.m.•52 views

CVE-2024-43476

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

7.6CVSS6.2AI score0.00337EPSS
CVE
CVE•added 2023/12/12 6:15 p.m.•49 views

CVE-2023-36020

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

7.6CVSS6.2AI score0.00103EPSS
CVE
CVE•added 2023/10/10 6:15 p.m.•48 views

CVE-2023-36433

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

6.5CVSS6.4AI score0.01859EPSS
CVE
CVE•added 2025/06/20 1:15 a.m.•14 views

CVE-2025-49715

Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a network.

7.5CVSS7.2AI score0.00105EPSS
Total number of security vulnerabilities89