cbcvebase.
CVE-2020-1063
published 2020-05-21

CVE-2020-1063: A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected…

medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

Affected

6 ranges
VendorProductVersion rangeFixed in
microsoftdynamics_365
microsoftdynamics_365
microsoftmicrosoft_dynamics_365
microsoftmicrosoft_dynamics_365
msrcmicrosoft_dynamics_365_version_8.2
msrcmicrosoft_dynamics_365_version_9.0