Known vulnerabilities in Microsoft Dynamics 365 - page 2

Vendor: Microsoft
Software: Microsoft Dynamics 365
Software CPE: cpe:2.3:a:microsoft:microsoft_dynamics_crm_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 84
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Dynamics 365 Microsoft Dynamics 365 is affected by 84 known vulnerabilities: 3 high, 24 medium, 57 low Critical High Medium Low

Vulnerabilities (84)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83037 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-36016		 CWE-79 Low
No
No
 9.0.51.06, 9.1.23.10 14.11.2023 SB2023111427
#VU83036 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-36410		 CWE-79 Low
No
No
 9.1.23.10 14.11.2023 SB2023111427
#VU81767 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36429		 CWE-200 Medium
No
No
 9.0.50.03, 9.1.22.04 10.10.2023 SB2023101046
#VU81766 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36433		 CWE-200 Medium
No
No
 9.0.49.04, 9.1.21.05 10.10.2023 SB2023101045
#VU81756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-36416		 CWE-79 Low
No
No
 9.0.47.08, 9.1.18.22 10.10.2023 SB2023101044
#VU80654 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-38164		 CWE-79 Low
No
No
 - 12.09.2023 SB2023091248
#VU80653 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-36886		 CWE-79 Low
No
No
 - 12.09.2023 SB2023091248
#VU79170 - Improper input validation
CVE-2023-35389		 CWE-20 Medium
No
No
 - 08.08.2023 SB2023080876
#VU78101 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-35335		 CWE-79 Low
No
No
 - 11.07.2023 SB2023071171
#VU78100 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33171		 CWE-79 Low
No
No
 - 11.07.2023 SB2023071171
#VU74970 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28309		 CWE-79 Low
No
No
 - 11.04.2023 SB2023041191
#VU74969 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28314		 CWE-79 Low
No
No
 - 11.04.2023 SB2023041191
#VU73557 - Exposure of sensitive information to an unauthorized actor
CVE-2023-24922		 CWE-200 Medium
No
No
 - 14.03.2023 SB2023031452
#VU73524 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24921		 CWE-79 Low
No
No
 - 14.03.2023 SB2023031442
#VU73523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24920		 CWE-79 Low
No
No
 - 14.03.2023 SB2023031442
#VU73522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24879		 CWE-79 Low
No
No
 - 14.03.2023 SB2023031442
#VU73521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24919		 CWE-79 Low
No
No
 - 14.03.2023 SB2023031442
#VU73520 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24891		 CWE-79 Low
No
No
 - 14.03.2023 SB2023031442
#VU72188 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-21570		 CWE-79 Low
No
No
 9.0.45.11, 9.1.16.20 14.02.2023 SB2023021432
#VU72187 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-21807		 CWE-79 Low
No
No
 9.0.45.11, 9.1.16.20 14.02.2023 SB2023021432


Showing elements 21 - 40 out of 84