Skip to content
OpenAdvisories

Product · Microsoft

Microsoft Dynamics 365 (on-premises) version 9.0

51 known vulnerabilities.

51 results · Feed

  • High 7.6

    Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

    <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a speciall…

  • Medium 5.4

    Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

    <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a speciall…

  • Medium 5.4

    Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

    <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a speciall…

  • High 7.1

    Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability

    <p>A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code i…

  • Medium 5.4

    Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

    <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a speciall…

  • Medium 6.8

    Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability

    <p>A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code i…

  • Medium 5.4

    Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

    <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a speciall…

  • Medium 5.4

    Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

    <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a speciall…

  • Unscored —

    Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

    A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially c…

  • Unscored —

    Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

    A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially c…

  • Unscored —

    Dynamics On-Premise Elevation of Privilege Vulnerability

    An elevation of privilege vulnerability exists in Dynamics On-Premise v9. An attacker who successfully exploited the vulnerability could leverage a customizer privilege within Dynamics to gain control of the Web Role hosting the Dynamics installation. To expl…