VendorsMicrosoftdynamics_365all versions
Vulnerabilities

Microsoft Dynamics 365

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

101CVEs
CVE-2026-42898
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published 2026-05-12 · Analyzed
9.9EPSS 0.010
CVE-2026-47647
Dynamics 365 Elevation of Privilege Vulnerability
Published 2026-06-18 · Analyzed
9.9EPSS 0.008
CVE-2024-38182
Microsoft Dynamics 365 Elevation of Privilege Vulnerability
Published 2024-07-31 · Analyzed
9.8EPSS 0.009
CVE-2026-32210
Microsoft Dynamics 365 (online) Spoofing Vulnerability
Published 2026-04-23 · Analyzed
9.3EPSS 0.007
CVE-2026-42833
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published 2026-05-12 · Modified
9.1EPSS 0.009
CVE-2022-23259
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
9.0EPSS 0.029
CVE-2018-8609
A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Remote Code Execution Vulnerability." This affects Microsoft Dynamics 365.
Published 2018-11-14 · Modified
8.8EPSS 0.099
CVE-2022-34700
Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability
Published 2022-09-13 · Modified
8.8EPSS 0.037
CVE-2021-34524
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
8.8EPSS 0.036
CVE-2019-1229
Dynamics On-Premise Elevation of Privilege Vulnerability
Published 2019-08-14 · Modified
8.8EPSS 0.035
CVE-2020-16862
Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
8.8EPSS 0.034
CVE-2022-35805
Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability
Published 2022-09-13 · Modified
8.8EPSS 0.030
CVE-2020-17152
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
Published 2020-12-09 · Modified
8.8EPSS 0.030
CVE-2020-17158
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
Published 2020-12-09 · Modified
8.8EPSS 0.030
CVE-2020-16860
Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability
Published 2020-09-11 · Modified
8.8EPSS 0.027
CVE-2021-42316
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published 2021-11-10 · Modified
8.8EPSS 0.023
CVE-2026-65815
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published 2026-08-11 · Analyzed
8.8EPSS 0.017
CVE-2026-40371
Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability
Published 2026-06-09 · Analyzed
8.8EPSS 0.008
CVE-2020-17147
Dynamics CRM Webclient Cross-site Scripting Vulnerability
Published 2020-12-09 · Modified
8.7EPSS 0.014
CVE-2025-62210
Dynamics 365 Field Service (online) Spoofing Vulnerability
Published 2025-11-11 · Analyzed
8.7EPSS 0.006
CVE-2025-62211
Dynamics 365 Field Service (online) Spoofing Vulnerability
Published 2025-11-11 · Analyzed
8.7EPSS 0.006
CVE-2024-21395
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2024-02-13 · Modified
8.2EPSS 0.011
CVE-2024-38211
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2024-08-13 · Analyzed
8.2EPSS 0.010
CVE-2023-35335
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-07-11 · Modified
8.2EPSS 0.008
CVE-2023-33171
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-07-11 · Modified
8.2EPSS 0.007
CVE-2023-21778
Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability
Published 2023-02-14 · Modified
8.0EPSS 0.010
CVE-2020-16872
Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Published 2020-09-11 · Modified
7.6EPSS 0.018
CVE-2024-21328
Dynamics 365 Sales Spoofing Vulnerability
Published 2024-02-13 · Modified
7.6EPSS 0.013
CVE-2024-21327
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
Published 2024-02-13 · Modified
7.6EPSS 0.013
CVE-2024-21393
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2024-02-13 · Modified
7.6EPSS 0.012
CVE-2024-21396
Dynamics 365 Sales Spoofing Vulnerability
Published 2024-02-13 · Modified
7.6EPSS 0.012
CVE-2024-21389
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2024-02-13 · Modified
7.6EPSS 0.012
CVE-2024-21394
Dynamics 365 Field Service Spoofing Vulnerability
Published 2024-02-13 · Modified
7.6EPSS 0.011
CVE-2024-21419
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2024-03-12 · Analyzed
7.6EPSS 0.011
CVE-2022-21932
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
Published 2022-01-11 · Modified
7.6EPSS 0.011
CVE-2023-36020
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-12-12 · Modified
7.6EPSS 0.010
CVE-2023-36886
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-09-12 · Modified
7.6EPSS 0.010
CVE-2023-36031
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-11-14 · Modified
7.6EPSS 0.009
CVE-2023-36410
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-11-14 · Modified
7.6EPSS 0.009
CVE-2023-38164
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-09-12 · Modified
7.6EPSS 0.009
1 / 3Next →