VendorsMicrosoftdynamics_365any version
Vulnerabilities

Microsoft Dynamics 365 any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

64CVEs
CVE-2023-35389
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published 2023-08-08 · Modified
6.5EPSS 0.008
CVE-2023-21807
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-02-14 · Modified
6.5EPSS 0.007
CVE-2023-21572
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-02-14 · Modified
6.5EPSS 0.006
CVE-2023-36016
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-11-14 · Modified
6.2EPSS 0.013
CVE-2021-28461
Dynamics Finance and Operations Cross-site Scripting Vulnerability
Published 2021-05-11 · Modified
6.1EPSS 0.013
CVE-2023-36030
Microsoft Dynamics 365 Sales Spoofing Vulnerability
Published 2023-11-14 · Modified
6.1EPSS 0.009
CVE-2023-36416
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-10-10 · Modified
6.1EPSS 0.008
CVE-2023-28314
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-04-11 · Modified
6.1EPSS 0.007
CVE-2026-33103
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2026-04-14 · Analyzed
5.5EPSS 0.004
CVE-2018-8605
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8606, CVE-2018-8607, CVE-2018-8608.
Published 2018-11-14 · Modified
5.4EPSS 0.016
CVE-2018-8606
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8605, CVE-2018-8607, CVE-2018-8608.
Published 2018-11-14 · Modified
5.4EPSS 0.016
CVE-2018-8607
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8605, CVE-2018-8606, CVE-2018-8608.
Published 2018-11-14 · Modified
5.4EPSS 0.016
CVE-2018-8608
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8605, CVE-2018-8606, CVE-2018-8607.
Published 2018-11-14 · Modified
5.4EPSS 0.016
CVE-2019-1375
A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.
Published 2019-10-10 · Modified
5.4EPSS 0.016
CVE-2023-24896
Dynamics 365 Finance Spoofing Vulnerability
Published 2023-07-14 · Modified
5.4EPSS 0.007
CVE-2023-21571
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-02-14 · Modified
5.4EPSS 0.006
CVE-2023-21570
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-02-14 · Modified
5.4EPSS 0.006
CVE-2023-24921
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-03-14 · Modified
5.4EPSS 0.006
CVE-2023-21573
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-02-14 · Modified
5.4EPSS 0.006
CVE-2023-24879
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-03-14 · Modified
5.4EPSS 0.006
CVE-2023-24891
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-03-14 · Modified
5.4EPSS 0.006
CVE-2023-24919
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-03-14 · Modified
5.4EPSS 0.006
CVE-2025-49745
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2025-08-12 · Analyzed
5.4EPSS 0.005
CVE-2023-24920
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-03-14 · Modified
5.4EPSS 0.003
← Prev2 / 2