Known vulnerabilities in Microsoft Dynamics 365 - page 4

Vendor: Microsoft
Software: Microsoft Dynamics 365
Software CPE: cpe:2.3:a:microsoft:microsoft_dynamics_crm_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 84
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Dynamics 365 Microsoft Dynamics 365 is affected by 84 known vulnerabilities: 3 high, 24 medium, 57 low Critical High Medium Low

Vulnerabilities (84)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46386 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-16871		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090808
#VU46383 - Improper input validation
CVE-2020-16860		 CWE-20 Medium
No
No
 - 08.09.2020 SB2020090808
#VU46382 - Improper input validation
CVE-2020-16862		 CWE-20 Medium
No
No
 - 08.09.2020 SB2020090808
#VU46381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-16859		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090808
#VU46380 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-16861		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090808
#VU46379 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-16864		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090808
#VU46378 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-16872		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090808
#VU46377 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-16878		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090808
#VU46376 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-16858		 CWE-79 Low
No
No
 - 08.09.2020 SB2020090808
#VU45599 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1591		 CWE-79 Low
No
No
 - 12.08.2020 SB2020081215
#VU27824 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1063		 CWE-79 Low
No
No
 - 12.05.2020 SB2020051241
#VU26845 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1050		 CWE-79 Low
No
No
 - 14.04.2020 SB2020041414
#VU26844 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1049		 CWE-79 Low
No
No
 - 14.04.2020 SB2020041414
#VU25958 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-0905		 CWE-78 High
No
No
 - 10.03.2020 SB2020031046
#VU21673 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1375		 CWE-79 Low
No
No
 - 09.10.2019 SB2019100921
#VU20287 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-1229		 CWE-94 Low
No
No
 - 14.08.2019 SB2019081417
#VU17663 - Improper Access Control
CVE-2018-8654		 CWE-284 Medium
No
No
 8.2.3 13.02.2019 SB2019021325
#VU17662 - Improper Access Control
CVE-2019-0745		 CWE-284 Medium
No
No
 8.2.3 13.02.2019 SB2019021325
#VU15861 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8607		 CWE-79 Low
No
No
 - 13.11.2018 SB2018111325
#VU15860 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8608		 CWE-79 Low
No
No
 - 13.11.2018 SB2018111325


Showing elements 61 - 80 out of 84