Vulnerabilities

Microsoft Dynamics 365 9.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

31CVEs

CVE-2022-23259

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Published 2022-04-15 · Modified

9.0EPSS 0.029

CVE-2022-34700

Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability

Published 2022-09-13 · Modified

8.8EPSS 0.037

CVE-2021-34524

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Published 2021-08-12 · Modified

8.8EPSS 0.036

CVE-2019-1229

Dynamics On-Premise Elevation of Privilege Vulnerability

Published 2019-08-14 · Modified

8.8EPSS 0.035

CVE-2020-16862

Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability

Published 2020-09-11 · Modified

8.8EPSS 0.034

CVE-2022-35805

Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability

Published 2022-09-13 · Modified

8.8EPSS 0.030

CVE-2020-16860

Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability

Published 2020-09-11 · Modified

8.8EPSS 0.027

CVE-2021-42316

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Published 2021-11-10 · Modified

8.8EPSS 0.023

CVE-2020-17147

Dynamics CRM Webclient Cross-site Scripting Vulnerability

Published 2020-12-09 · Modified

8.7EPSS 0.014

CVE-2020-16872

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

Published 2020-09-11 · Modified

7.6EPSS 0.018

CVE-2022-21932

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

Published 2022-01-11 · Modified

7.6EPSS 0.011

CVE-2021-40457

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

Published 2021-10-13 · Modified

7.4EPSS 0.016

CVE-2022-21957

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Published 2022-02-09 · Modified

7.2EPSS 0.027

CVE-2021-24101

Microsoft Dataverse Information Disclosure Vulnerability

Published 2021-02-25 · Modified

6.5EPSS 0.031

CVE-2019-1008

A security feature bypass vulnerability exists in Dynamics On Premise, aka 'Microsoft Dynamics On-Premise Security Feature Bypass'.

Published 2019-05-16 · Modified

5.9EPSS 0.028

CVE-2020-16871

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

Published 2020-09-11 · Modified

5.4EPSS 0.016

CVE-2020-16878

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

Published 2020-09-11 · Modified

5.4EPSS 0.016

CVE-2020-16858

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

Published 2020-09-11 · Modified

5.4EPSS 0.016

CVE-2020-16859

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

Published 2020-09-11 · Modified

5.4EPSS 0.016

CVE-2020-16864

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

Published 2020-09-11 · Modified

5.4EPSS 0.016

CVE-2020-16861

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

Published 2020-09-11 · Modified

5.4EPSS 0.016

CVE-2020-1591

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

Published 2020-08-17 · Modified

5.4EPSS 0.015

CVE-2020-1063

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

Published 2020-05-21 · Modified

5.4EPSS 0.015

CVE-2020-17021

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Published 2020-11-11 · Modified

5.4EPSS 0.014

CVE-2020-17018

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Published 2020-11-11 · Modified

5.4EPSS 0.014

CVE-2020-17005

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability