Known vulnerabilities in Dynamics 365 for Finance and Operations

Vendor: Microsoft
Software: Dynamics 365 for Finance and Operations
Software CPE: cpe:2.3:a:microsoft:dynamics_365_for_finance_and_operations:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Dynamics 365 for Finance and Operations Dynamics 365 for Finance and Operations is affected by 5 known vulnerabilities: 3 medium, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84145 - Improper input validation
CVE-2023-35621		 CWE-20 Medium
No
No
 - 12.12.2023 SB2023121293
#VU80721 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-36800		 CWE-79 Low
No
No
 - 13.09.2023 SB2023091316
#VU77280 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-24896		 CWE-451 Medium
No
No
 - 14.06.2023 SB2023061411
#VU53116 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-28461		 CWE-79 Low
No
No
 - 11.05.2021 SB2021051135
#VU45658 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-1182		 CWE-94 Medium
No
No
 - 13.08.2020 SB2020081302