Medium · 5.4 CVE-2023-24919 EUVD-2023-28907GHSA-cxpj-cm5p-xpg3

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Published Mar 14, 2023 · Updated Feb 28, 2025 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft Dynamics 365 (on-premises) version 9.0 Product: Microsoft Dynamics 365 (on-premises) version 9.1

Description

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft Dynamics 365 (on-premises) version 9.0	9.0.0 – < 9.0.45.11	9.0.45.11
Microsoft	Microsoft Dynamics 365 (on-premises) version 9.1	9.0 – < 9.1.16.20	9.1.16.20

Advisories 1

MSRC-CVE-2023-24919 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Microsoft Security Response Center · Mar 14, 2023

References

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability vendor-advisory