Summary
Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
Security updates
9.0.34.12 — https://support.microsoft.com/help/5010574
Vulnerabilities 1
-
High 7.6
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
Revision history
-
#1
Information published.
-
#2
The following revisions have been made: 1) In the Security Updates table, removed Microsoft Dynamics 365 Customer Engagement V9.1 as it is not affected by this vulnerability. 2) Added the update information for Microsoft Dynamics 365 Customer Engagement V9.0.
References
-
CVE-2022-21932 Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21932
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss