VYPR
← All advisories
Medium severity5.4NVD Advisory· Published May 21, 2020· Updated Jun 17, 2026

CVE-2020-1063

CVE-2020-1063

Description

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

Affected products

4
  • Microsoft/Dynamics 3652 versions
    cpe:2.3:a:microsoft:dynamics_365:8.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:dynamics_365:8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:dynamics_365:9.0:*:*:*:*:*:*:*
  • Microsoft/Dynamics 365 (on-premises)cpe-rescue2 versions
    8.2+ 1 more
    • (no CPE)range: 8.2
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.