Known vulnerabilities in Microsoft Dynamics 365

Vendor: Microsoft
Software: Microsoft Dynamics 365
Software CPE: cpe:2.3:a:microsoft:microsoft_dynamics_crm_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 84
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Dynamics 365 Microsoft Dynamics 365 is affected by 84 known vulnerabilities: 3 high, 24 medium, 57 low Critical High Medium Low

Vulnerabilities (84)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142247 - Exposure of sensitive information to an unauthorized actor
CVE-2026-66301		 CWE-200 Medium
No
No
 9.1.0047.0006 13.08.2026 SB2026081323
#VU142245 - Deserialization of Untrusted Data
CVE-2026-65815		 CWE-502 Medium
No
No
 9.1.0047.0006 13.08.2026 SB2026081321
#VU126216 - Improper Access Control
CVE-2026-33103		 CWE-284 Low
No
No
 9.1.0044.0015 15.04.2026 SB20260415137
#VU118315 - Exposure of sensitive information to an unauthorized actor
CVE-2025-62206		 CWE-200 Medium
No
No
 - 11.11.2025 SB2025111186
#VU113852 - Exposure of sensitive information to an unauthorized actor
CVE-2025-53728		 CWE-200 Medium
No
No
 - 12.08.2025 SB2025081269
#VU113851 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-49745		 CWE-79 Low
No
No
 - 12.08.2025 SB2025081269
#VU97070 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43476		 CWE-79 Low
No
No
 - 10.09.2024 SB20240910124
#VU95945 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38211		 CWE-79 Low
No
No
 - 14.08.2024 SB2024081403
#VU93949 - Improper Authorization
CVE-2024-30061		 CWE-285 Medium
No
No
 - 09.07.2024 SB2024070996
#VU91753 - Exposure of sensitive information to an unauthorized actor
CVE-2024-35263		 CWE-200 Medium
No
No
 - 11.06.2024 SB20240611269
#VU87376 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-21419		 CWE-79 Low
No
No
 - 12.03.2024 SB20240312317
#VU86483 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-21394		 CWE-451 Medium
No
No
 - 13.02.2024 SB2024021381
#VU86475 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-21328		 CWE-451 Medium
No
No
 - 13.02.2024 SB2024021373
#VU86474 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-21396		 CWE-451 Medium
No
No
 - 13.02.2024 SB2024021373
#VU86418 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-21395		 CWE-79 Low
No
No
 - 13.02.2024 SB2024021346
#VU86417 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-21389		 CWE-79 Low
No
No
 - 13.02.2024 SB2024021346
#VU86415 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-21393		 CWE-79 Low
No
No
 - 13.02.2024 SB2024021346
#VU84109 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-36020		 CWE-79 Low
No
No
 - 12.12.2023 SB2023121265
#VU83072 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-36030		 CWE-451 Medium
No
No
 - 14.11.2023 SB2023111455
#VU83038 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-36031		 CWE-79 Low
No
No
 9.1.23.10 14.11.2023 SB2023111427


Showing elements 1 - 20 out of 84