Medium WID-SEC-2023-2893 5 CVEs

Microsoft Dynamics 365: Mehrere Schwachstellen

Published Nov 14, 2023 · Updated Nov 14, 2023 · de-DE

Vendor: Microsoft Product: Dynamics 365 Product: Dynamics 365 (on-premises) version 9.0 Product: Dynamics 365 (on-premises) version 9.1 Product: Dynamics 365 Send Customer Voice survey from app Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Microsoft Dynamics 365 ausnutzen, um einen Cross-Site Scripting oder Weiterleitungs-Angriff durchzuführen.

Product

Microsoft Dynamics 365 ist eine All-in-One-Unternehmensmanagementlösung.

Vulnerabilities 5

High 7.6

CVE-2023-36007

Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability

Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability

Microsoft Send Customer Voice survey from Dynamics 365 app

Nov 14, 2023
High 7.6

CVE-2023-36031

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.1

Nov 14, 2023
High 7.6

CVE-2023-36410

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.1

Nov 14, 2023
Medium 6.2

CVE-2023-36016

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.0 Microsoft Dynamics 365 (on-premises) version 9.1

Nov 14, 2023
Medium 6.1

CVE-2023-36030

Microsoft Dynamics 365 Sales Spoofing Vulnerability

Microsoft Dynamics 365 Sales Spoofing Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.0 Microsoft Dynamics 365 (on-premises) version 9.1

Nov 14, 2023

Revision history

2023-11-14 #1
Initiale Fassung

References

Microsoft Leitfaden für Sicherheitsupdates vom 2023-11-14
https://msrc.microsoft.com/update-guide