Known vulnerabilities in Microsoft Dynamics 365 Customer Engagement
Vendor:
Microsoft
Software CPE:
cpe:2.3:a:microsoft:microsoft_dynamics_365_customer_engagement:*:*:*:*:*:*:*:*
Website:
https://www.microsoft.com
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU147771 - Improper Control of Generation of Code ('Code Injection') CVE-2026-77908 |
CWE-94 | Medium | 9.1.0048.0004 | 08.09.2026 |
SB2026090875 |
||
| #VU86409 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-21327 |
CWE-79 | Low | - | 13.02.2024 |
SB2024021342 |
||
| #VU59466 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-21932 |
CWE-79 | Low | - | 11.01.2022 |
SB2022011142 |
||
| #VU57293 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-40457 |
CWE-79 | Low | - | 12.10.2021 |
SB2021101237 |