Dynamics 365 vulnerabilities
6 known vulnerabilities in Dynamics 365 from Microsoft. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Microsoft Dynamics 365 (on-premises) version 9.1: Improper Handling of Exceptional Conditions
Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a network.
- 9.9 Critical severity
Microsoft Dynamics 365 (on-premises) version 9.1: Improper Control of Generation of Code
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.
- 9.1 Critical severity
Microsoft Dynamics 365 (on-premises) version 9.1: Execution with Unnecessary Privileges
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.
- 8.7 High severity
Dynamics 365 Field Service (online): Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network.
- 8.7 High severity
Dynamics 365 Field Service (online): Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network.
- 7.5 High severity
Dynamics 365 FastTrack Implementation: Exposure of Private Personal Information to an Unauthorized Actor
Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a network.