← All advisories

High severity8.7NVD Advisory· Published Dec 10, 2020· Updated Jun 17, 2026

CVE-2020-17147

CVE-2020-17147

Description

Dynamics CRM Webclient Cross-site Scripting Vulnerability

Affected products

5

Microsoft/Dynamics 365 (on-premises)cpe-rescue2 versions
8.0+ 1 more
- (no CPE)range: 8.0
- (no CPE)range: 9.0.0
Microsoft/Dynamics CRM Webclientllm-create
Microsoft/Dynamics 3652 versions
cpe:2.3:a:microsoft:dynamics_365:8.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:dynamics_365:8.2:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:dynamics_365:9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17147nvdPatchVendor Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17147nvd

News mentions

0

No linked articles in our index yet.