VendorsMicrosoftdynamics_365any version
Vulnerabilities

Microsoft Dynamics 365 any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

64CVEs
CVE-2026-42898
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published 2026-05-12 · Analyzed
9.9EPSS 0.012
CVE-2026-47647
Dynamics 365 Elevation of Privilege Vulnerability
Published 2026-06-18 · Analyzed
9.9EPSS 0.008
CVE-2026-32210
Microsoft Dynamics 365 (online) Spoofing Vulnerability
Published 2026-04-23 · Analyzed
9.3EPSS 0.006
CVE-2026-42833
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published 2026-05-12 · Modified
9.1EPSS 0.007
CVE-2018-8609
A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Remote Code Execution Vulnerability." This affects Microsoft Dynamics 365.
Published 2018-11-14 · Modified
8.8EPSS 0.099
CVE-2020-17158
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
Published 2020-12-09 · Modified
8.8EPSS 0.030
CVE-2020-17152
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
Published 2020-12-09 · Modified
8.8EPSS 0.030
CVE-2026-65815
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published 2026-08-11 · Analyzed
8.8EPSS 0.009
CVE-2026-40371
Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability
Published 2026-06-09 · Analyzed
8.8EPSS 0.006
CVE-2025-62211
Dynamics 365 Field Service (online) Spoofing Vulnerability
Published 2025-11-11 · Analyzed
8.7EPSS 0.006
CVE-2025-62210
Dynamics 365 Field Service (online) Spoofing Vulnerability
Published 2025-11-11 · Analyzed
8.7EPSS 0.006
CVE-2024-21395
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2024-02-13 · Modified
8.2EPSS 0.011
CVE-2023-35335
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-07-11 · Modified
8.2EPSS 0.008
CVE-2023-33171
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-07-11 · Modified
8.2EPSS 0.007
CVE-2023-21778
Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability
Published 2023-02-14 · Modified
8.0EPSS 0.010
CVE-2024-21328
Dynamics 365 Sales Spoofing Vulnerability
Published 2024-02-13 · Modified
7.6EPSS 0.013
CVE-2024-21327
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
Published 2024-02-13 · Modified
7.6EPSS 0.013
CVE-2024-21389
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2024-02-13 · Modified
7.6EPSS 0.012
CVE-2024-21396
Dynamics 365 Sales Spoofing Vulnerability
Published 2024-02-13 · Modified
7.6EPSS 0.012
CVE-2024-21393
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2024-02-13 · Modified
7.6EPSS 0.012
CVE-2024-21394
Dynamics 365 Field Service Spoofing Vulnerability
Published 2024-02-13 · Modified
7.6EPSS 0.011
CVE-2024-21419
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2024-03-12 · Analyzed
7.6EPSS 0.011
CVE-2023-36020
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-12-12 · Modified
7.6EPSS 0.010
CVE-2023-36886
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-09-12 · Modified
7.6EPSS 0.010
CVE-2023-36031
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-11-14 · Modified
7.6EPSS 0.009
CVE-2023-36410
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-11-14 · Modified
7.6EPSS 0.009
CVE-2023-38164
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-09-12 · Modified
7.6EPSS 0.009
CVE-2024-43476
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2024-09-10 · Analyzed
7.6EPSS 0.009
CVE-2023-36800
Dynamics Finance and Operations Cross-site Scripting Vulnerability
Published 2023-09-12 · Modified
7.6EPSS 0.008
CVE-2023-28309
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Published 2023-04-11 · Modified
7.6EPSS 0.007
CVE-2023-35621
Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability
Published 2023-12-12 · Modified
7.5EPSS 0.023
CVE-2025-49715
Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
Published 2025-06-20 · Analyzed
7.5EPSS 0.008
CVE-2025-55238
Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
Published 2025-09-04 · Analyzed
7.5EPSS 0.008
CVE-2023-36429
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2023-10-10 · Modified
6.5EPSS 0.020
CVE-2023-36433
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2023-10-10 · Modified
6.5EPSS 0.019
CVE-2023-24922
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2023-03-14 · Modified
6.5EPSS 0.015
CVE-2025-53728
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2025-08-12 · Analyzed
6.5EPSS 0.012
CVE-2020-16943
Dynamics 365 Commerce Elevation of Privilege Vulnerability
Published 2020-10-16 · Modified
6.5EPSS 0.011
CVE-2025-62206
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Published 2025-11-11 · Analyzed
6.5EPSS 0.009
CVE-2023-35389
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published 2023-08-08 · Modified
6.5EPSS 0.008
1 / 2Next →