CVE-2021-28461

CWE-79 — Cross-site Scripting (XSS)4 documents4 sources
Severity
5.4MEDIUM
EPSS
2.4%
top 14.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Dynamics 365 FOR Finance AND Operations
Timeline
PublishedMay 11
Latest updateMay 24

Description

Dynamics Finance and Operations Cross-site Scripting Vulnerability

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:NExploitability: 1.7 | Impact: 4.0

Affected Packages1 packages

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-xjmv-3379-gmjr: Dynamics Finance and Operations Cross-site Scripting Vulnerability↗2022-05-24
▶
CVEList
Dynamics Finance and Operations Cross-site Scripting Vulnerability↗2021-05-11
▶

📋Vendor Advisories

1
Microsoft
Dynamics Finance and Operations Cross-site Scripting Vulnerability↗2021-05-11
▶
CVE-2021-28461 (MEDIUM CVSS 5.4) | Dynamics Finance and Operations Cro | cvebase.io