Dynamics 365

CVEs (115)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-49745	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Aug 12, 2025	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to perform spoofing over a network.
CVE-2023-24896	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Jul 14, 2023	Dynamics 365 Finance Spoofing Vulnerability
CVE-2023-24921	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Mar 14, 2023	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-24920	Microsoft Dynamics 365	Med	0.35	5.4	0.00	Mar 14, 2023	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-24919	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Mar 14, 2023	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-24891	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Mar 14, 2023	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-24879	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Mar 14, 2023	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-21573	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Feb 14, 2023	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-21571	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Feb 14, 2023	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-21570	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Feb 14, 2023	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2021-41354	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Oct 13, 2021	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2021-41353	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Oct 13, 2021	Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability
CVE-2021-36950	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Aug 12, 2021	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2020-17021	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Nov 11, 2020	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2020-17018	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Nov 11, 2020	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2020-17006	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Nov 11, 2020	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2020-17005	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Nov 11, 2020	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2020-16978	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Oct 16, 2020	A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
CVE-2020-16956	Microsoft Dynamics 365	Med	0.35	5.4	0.01	Oct 16, 2020	A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
CVE-2020-16878	Microsoft Dynamics 365	Med	0.35	5.4	0.02	Sep 11, 2020	A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…

CVE-2025-49745MedAug 12, 2025
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to perform spoofing over a network.
CVE-2023-24896MedJul 14, 2023
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Dynamics 365 Finance Spoofing Vulnerability
CVE-2023-24921MedMar 14, 2023
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-24920MedMar 14, 2023
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.00
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-24919MedMar 14, 2023
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-24891MedMar 14, 2023
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-24879MedMar 14, 2023
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-21573MedFeb 14, 2023
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-21571MedFeb 14, 2023
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-21570MedFeb 14, 2023
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2021-41354MedOct 13, 2021
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2021-41353MedOct 13, 2021
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability
CVE-2021-36950MedAug 12, 2021
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2020-17021MedNov 11, 2020
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2020-17018MedNov 11, 2020
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2020-17006MedNov 11, 2020
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2020-17005MedNov 11, 2020
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2020-16978MedOct 16, 2020
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
CVE-2020-16956MedOct 16, 2020
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.01
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…
CVE-2020-16878MedSep 11, 2020
Microsoft
Dynamics 365
risk 0.35cvss 5.4epss 0.02
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to…

Page 5 of 6