High WID-SEC-2024-0381 8 CVEs

Microsoft Dynamics 365: Mehrere Schwachstellen

Published Feb 13, 2024 · Updated Feb 14, 2024 · Revision 2 · de-DE

Vendor: Microsoft Product: Dynamics 365 Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Microsoft Dynamics 365 ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten oder vertrauliche Informationen offenzulegen.

Product

Microsoft Dynamics 365 ist eine All-in-One-Unternehmensmanagementlösung.

Vulnerabilities 8

High 8.2

CVE-2024-21395

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.1

Feb 13, 2024
High 8.0

CVE-2024-21380

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

Microsoft Microsoft Dynamics 365 Business Central 2023 Release Wave 1 Microsoft Dynamics 365 Business Central 2023 Release Wave 2 Microsoft Dynamics 365 Business Central 2022 Release Wave 2

Feb 13, 2024
High 7.6

CVE-2024-21327

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 Customer Engagement V9.1

Feb 13, 2024
High 7.6

CVE-2024-21328

Dynamics 365 Sales Spoofing Vulnerability

Dynamics 365 Sales Spoofing Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.1

Feb 13, 2024
High 7.6

CVE-2024-21389

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.1

Feb 13, 2024
High 7.6

CVE-2024-21393

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.1

Feb 13, 2024
High 7.6

CVE-2024-21394

Dynamics 365 Field Service Spoofing Vulnerability

Dynamics 365 Field Service Spoofing Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.1

Feb 13, 2024
High 7.6

CVE-2024-21396

Dynamics 365 Sales Spoofing Vulnerability

Dynamics 365 Sales Spoofing Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.1

Feb 13, 2024

Revision history

2024-02-14 #2
Korrektur CPE String
2024-02-13 #1
Initiale Fassung

References

Microsoft Leitfaden für Sicherheitsupdates vom 2024-02-13
https://msrc.microsoft.com/update-guide