CVE-2023-28313

The CVE-2023-28313 entry covers a Cross-Site Scripting (XSS) vulnerability in Microsoft Dynamics 365 Customer Voice. Affected product: Microsoft Dynamics 365 Customer Voice (part of Dynamics suite). Description and connected records indicate an XSS flaw that can interfere with the web UI, enablin...

CVE-2023-36007

CVE-2023-36007 concerns Microsoft Dynamics 365 Send Customer Voice, a spoofing vulnerability in the on-premises Send Customer Voice survey UI. The issue enables UI spoofing that could lead users to impersonate or be misled by the interface. Affected products include Dynamics 365 on-premises (v9.0...