VendorsMicrosoftdynamics_365all versions
Vulnerabilities

Microsoft Dynamics 365

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

101CVEs
CVE-2024-43476
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2024-09-10 · Analyzed
7.6EPSS 0.009
CVE-2023-36800
Dynamics Finance and Operations Cross-site Scripting Vulnerability
Published 2023-09-12 · Modified
7.6EPSS 0.008
CVE-2023-28309
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-04-11 · Modified
7.6EPSS 0.007
CVE-2023-35621
Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability
Published 2023-12-12 · Modified
7.5EPSS 0.023
CVE-2025-49715
Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
Published 2025-06-20 · Analyzed
7.5EPSS 0.008
CVE-2025-55238
Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
Published 2025-09-04 · Analyzed
7.5EPSS 0.008
CVE-2021-40457
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
Published 2021-10-13 · Modified
7.4EPSS 0.016
CVE-2024-30061
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2024-07-09 · Modified
7.3EPSS 0.014
CVE-2022-21957
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published 2022-02-09 · Modified
7.2EPSS 0.027
CVE-2021-24101
Microsoft Dataverse Information Disclosure Vulnerability
Published 2021-02-25 · Modified
6.5EPSS 0.031
CVE-2023-36429
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2023-10-10 · Modified
6.5EPSS 0.020
CVE-2023-36433
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2023-10-10 · Modified
6.5EPSS 0.019
CVE-2018-8654
An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Server, aka 'Microsoft Dynamics 365 Elevation of Privilege Vulnerability'.
Published 2020-01-24 · Modified
6.5EPSS 0.018
CVE-2023-24922
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2023-03-14 · Modified
6.5EPSS 0.015
CVE-2025-53728
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2025-08-12 · Analyzed
6.5EPSS 0.012
CVE-2020-16943
Dynamics 365 Commerce Elevation of Privilege Vulnerability
Published 2020-10-16 · Modified
6.5EPSS 0.011
CVE-2026-66301
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2026-08-11 · Analyzed
6.5EPSS 0.010
CVE-2025-62206
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2025-11-11 · Analyzed
6.5EPSS 0.009
CVE-2023-35389
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published 2023-08-08 · Modified
6.5EPSS 0.008
CVE-2023-21807
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-02-14 · Modified
6.5EPSS 0.007
CVE-2023-21572
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-02-14 · Modified
6.5EPSS 0.006
CVE-2023-36016
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-11-14 · Modified
6.2EPSS 0.013
CVE-2021-28461
Dynamics Finance and Operations Cross-site Scripting Vulnerability
Published 2021-05-11 · Modified
6.1EPSS 0.013
CVE-2023-36030
Microsoft Dynamics 365 Sales Spoofing Vulnerability
Published 2023-11-14 · Modified
6.1EPSS 0.009
CVE-2023-36416
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-10-10 · Modified
6.1EPSS 0.008
CVE-2023-28314
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-04-11 · Modified
6.1EPSS 0.007
CVE-2019-1008
A security feature bypass vulnerability exists in Dynamics On Premise, aka 'Microsoft Dynamics On-Premise Security Feature Bypass'.
Published 2019-05-16 · Modified
5.9EPSS 0.028
CVE-2024-35263
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2024-06-11 · Modified
5.7EPSS 0.017
CVE-2026-33103
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2026-04-14 · Analyzed
5.5EPSS 0.004
CVE-2020-16871
Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Published 2020-09-11 · Modified
5.4EPSS 0.016
CVE-2020-16878
Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Published 2020-09-11 · Modified
5.4EPSS 0.016
CVE-2020-16858
Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Published 2020-09-11 · Modified
5.4EPSS 0.016
CVE-2020-16859
Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Published 2020-09-11 · Modified
5.4EPSS 0.016
CVE-2018-8608
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8605, CVE-2018-8606, CVE-2018-8607.
Published 2018-11-14 · Modified
5.4EPSS 0.016
CVE-2018-8605
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8606, CVE-2018-8607, CVE-2018-8608.
Published 2018-11-14 · Modified
5.4EPSS 0.016
CVE-2018-8606
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8605, CVE-2018-8607, CVE-2018-8608.
Published 2018-11-14 · Modified
5.4EPSS 0.016
CVE-2018-8607
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8605, CVE-2018-8606, CVE-2018-8608.
Published 2018-11-14 · Modified
5.4EPSS 0.016
CVE-2020-16861
Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Published 2020-09-11 · Modified
5.4EPSS 0.016
CVE-2020-16864
Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
Published 2020-09-11 · Modified
5.4EPSS 0.016
CVE-2019-1375
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.
Published 2019-10-10 · Modified
5.4EPSS 0.016
← Prev2 / 3Next →