Lucene search
MicrosoftVULNRICHMENT:CVE-2024-38166HistoryAug 06, 2024 - 9:38 p.m.
CVE-2024-38166 Microsoft Dynamics 365 Cross-site Scripting Vulnerability
2024-08-0621:38:18
CWE-79
microsoft
github.com
3
microsoft
dynamics 365
cross-site scripting
CVSS3
8.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C
AI Score
8.3
Confidence
High
EPSS
0.001
Percentile
27.8%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related
cvelist
cvelist
CVE-2024-38166 Microsoft Dynamics 365 Cross-site Scripting Vulnerability
2024-08-06 21:38:18
cve
cve
CVE-2024-38166
2024-08-06 22:15:54
mscve
mscve
Microsoft Dynamics 365 Cross-site Scripting Vulnerability
2024-08-06 07:00:00
kaspersky
kaspersky
KLA71413 XSS vulnerability in Microsoft Dynamics
2024-08-06 00:00:00
nvd
nvd
CVE-2024-38166
2024-08-06 22:15:54
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday, August 2024 Security Update Review
2024-08-13 20:31:30
rapid7blog
rapid7blog
Patch Tuesday - August 2024
2024-08-13 23:36:30
CVSS3
8.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C
AI Score
8.3
Confidence
High
EPSS
0.001
Percentile
27.8%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-38166