Microsoft Dynamics 365 vulnerabilities
96 known vulnerabilities affecting microsoft/dynamics_365.
Total CVEs
96
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL4HIGH27MEDIUM63LOW2
Vulnerabilities
Page 4 of 5
CVE-2018-8608P4MEDIUMCVSS 5.4≥ 8.0, < 8.2.3.00032018-11-14
CVE-2018-8608 [MEDIUM] CVE-2018-8608: A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8605, CVE-20
nvd
CVE-2020-0656P4MEDIUMCVSS 5.4v7.02020-01-14
CVE-2020-0656 [MEDIUM] CWE-79 CVE-2020-0656: A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not prope
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.
nvd
CVE-2021-40457P4MEDIUMCVSS 6.1v9.0v9.12021-10-13
CVE-2021-40457 [MEDIUM] CWE-79 CVE-2021-40457: Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
nvd
CVE-2023-36030P4MEDIUMCVSS 6.1≥ 9.0, < 9.0.51.06≥ 9.1, < 9.1.23.102023-11-14
CVE-2023-36030 [MEDIUM] CWE-79 CVE-2023-36030: Microsoft Dynamics 365 Sales Spoofing Vulnerability
Microsoft Dynamics 365 Sales Spoofing Vulnerability
nvd
CVE-2025-49745P4MEDIUMCVSS 5.4≥ 9.1, < 9.1.38.102025-08-12
CVE-2025-49745 [MEDIUM] CWE-79 CVE-2025-49745: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Dy
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2020-17018P4MEDIUMCVSS 5.4v9.02020-11-11
CVE-2020-17018 [MEDIUM] CWE-79 CVE-2020-17018: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
nvd
CVE-2020-17021P4MEDIUMCVSS 5.4v9.02020-11-11
CVE-2020-17021 [MEDIUM] CWE-79 CVE-2020-17021: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
nvd
CVE-2020-17005P4MEDIUMCVSS 5.4v9.02020-11-11
CVE-2020-17005 [MEDIUM] CWE-79 CVE-2020-17005: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
nvd
CVE-2023-36416P4MEDIUMCVSS 6.1≥ 9.0, < 9.0.47.08≥ 9.1, < 9.1.18.222023-10-10
CVE-2023-36416 [MEDIUM] CWE-79 CVE-2023-36416: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
nvd
CVE-2023-33171P4MEDIUMCVSS 6.1≥ 9.0, < 9.0.47.08≥ 9.1, < 9.1.18.222023-07-11
CVE-2023-33171 [MEDIUM] CWE-79 CVE-2023-33171: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
nvd
CVE-2023-28314P4MEDIUMCVSS 6.1≥ 9.0, < 9.0.46.15≥ 9.1, < 9.1.17.292023-04-11
CVE-2023-28314 [MEDIUM] CWE-79 CVE-2023-28314: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
nvd
CVE-2020-17147P4MEDIUMCVSS 5.4v8.2v9.02020-12-10
CVE-2020-17147 [MEDIUM] CWE-79 CVE-2020-17147: Dynamics CRM Webclient Cross-site Scripting Vulnerability
Dynamics CRM Webclient Cross-site Scripting Vulnerability
nvd
CVE-2024-21419P4MEDIUMCVSS 5.4≥ 9.1, < 9.1.262024-03-12
CVE-2024-21419 [MEDIUM] CWE-79 CVE-2024-21419: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
nvd
CVE-2022-21932P4MEDIUMCVSS 5.4v9.02022-01-11
CVE-2022-21932 [MEDIUM] CWE-79 CVE-2022-21932: Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
nvd
CVE-2021-36950P4MEDIUMCVSS 5.4v9.02021-08-12
CVE-2021-36950 [MEDIUM] CWE-79 CVE-2021-36950: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
nvd
CVE-2023-36020P4MEDIUMCVSS 5.4≥ 9.0, < 9.0.51.06≥ 9.1, < 9.1.23.102023-12-12
CVE-2023-36020 [MEDIUM] CWE-79 CVE-2023-36020: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
nvd
CVE-2023-36886P4MEDIUMCVSS 5.4≥ 9.0, < 9.0.49.04≥ 9.1, < 9.1.21.052023-09-12
CVE-2023-36886 [MEDIUM] CWE-79 CVE-2023-36886: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
nvd
CVE-2021-41354P4MEDIUMCVSS 5.4v9.0v9.12021-10-13
CVE-2021-41354 [MEDIUM] CWE-79 CVE-2021-41354: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
nvd
CVE-2023-36410P4MEDIUMCVSS 5.4≥ 9.1, < 9.1.23.102023-11-14
CVE-2023-36410 [MEDIUM] CWE-79 CVE-2023-36410: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
nvd
CVE-2023-36031P4MEDIUMCVSS 5.4≥ 9.1, < 9.1.23.102023-11-14
CVE-2023-36031 [MEDIUM] CWE-79 CVE-2023-36031: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
nvd