Known vulnerabilities in Microsoft Dynamics 365 - page 3

Vendor: Microsoft
Software: Microsoft Dynamics 365
Software CPE: cpe:2.3:a:microsoft:microsoft_dynamics_crm_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 84
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Dynamics 365 Microsoft Dynamics 365 is affected by 84 known vulnerabilities: 3 high, 24 medium, 57 low Critical High Medium Low

Vulnerabilities (84)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72191 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-21573		 CWE-79 Low
No
No
 9.0.45.11, 9.1.16.20 14.02.2023 SB2023021432
#VU72190 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-21572		 CWE-79 Low
No
No
 9.0.45.11, 9.1.16.20 14.02.2023 SB2023021432
#VU72189 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-21571		 CWE-79 Low
No
No
 9.0.45.11, 9.1.16.20 14.02.2023 SB2023021432
#VU67280 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-35805		 CWE-89 Medium
No
No
 - 13.09.2022 SB2022091361
#VU67259 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-34700		 CWE-89 High
No
No
 - 13.09.2022 SB2022091361
#VU62148 - Improper input validation
CVE-2022-23259		 CWE-20 Medium
No
No
 - 12.04.2022 SB2022041246
#VU60443 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21957		 CWE-94 Low
No
No
 - 08.02.2022 SB2022020852
#VU58053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42316		 CWE-94 Medium
No
No
 - 09.11.2021 SB2021110925
#VU57292 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41354		 CWE-79 Low
No
No
 - 12.10.2021 SB2021101236
#VU57291 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-41353		 CWE-451 Medium
No
No
 - 12.10.2021 SB2021101236
#VU55691 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34524		 CWE-94 Medium
No
No
 - 10.08.2021 SB2021081010
#VU55690 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36950		 CWE-79 Low
No
No
 - 10.08.2021 SB2021081010
#VU50503 - Exposure of sensitive information to an unauthorized actor
CVE-2021-24101		 CWE-200 Medium
No
No
 - 09.02.2021 SB2021020957
#VU48854 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-17147		 CWE-79 Low
No
No
 - 08.12.2020 SB2020120819
#VU48296 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-17021		 CWE-79 Low
No
No
 - 10.11.2020 SB2020111041
#VU48295 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-17018		 CWE-79 Low
No
No
 - 10.11.2020 SB2020111041
#VU48294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-17006		 CWE-79 Low
No
No
 - 10.11.2020 SB2020111041
#VU48293 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-17005		 CWE-79 Low
No
No
 - 10.11.2020 SB2020111041
#VU47578 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-16978		 CWE-79 Low
No
No
 - 13.10.2020 SB2020101334
#VU47577 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-16956		 CWE-79 Low
No
No
 - 13.10.2020 SB2020101334


Showing elements 41 - 60 out of 84