Skip to content
OpenAdvisories
High MSRC-CVE-2022-21957 1 CVE

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Published Feb 8, 2022 · Updated Mar 23, 2022 · Revision 3

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Are the updates for the Microsoft Dynamics 365 (on-premises) versions listed in this vulnerability currently available?
The security update for Microsoft Dynamics 365 (on-premises) version 9.0 and Microsoft Dynamics 365 (on-premises) version 9.1 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.

Security updates
9.0.37.2 — https://support.microsoft.com/help/5012732
9.1.9.8 — https://support.microsoft.com/help/5012731

Vulnerabilities 1

Revision history

  1. #3

    The following revisions have been made to the Security Updates table: 1) Microsoft is announcing the availability of the security updates for Microsoft Dynamics 365 (on-premises) version 9.0 and Microsoft Dynamics 365 (on-premises) version 9.1. Customers running these versions of Microsoft Dynamics 365 (on-premises) should install the update for their product to be protected from this vulnerability. See the Security Updates table for Download and Article links. 2) Removed Microsoft Dynamics 365 (on-premises) version 8.2 as it is not affected by this vulnerability.

  2. #2

    Added FAQ to explain that the security updates for Microsoft Dynamics 365 (on-premises) version 8.2 and Microsoft Dynamics 365 (on-premises) version 9.1 are not immediately available, and that customers will be notified via a revision to the CVE when the updates are available.

  3. #1

    Information published.

References