Search Results (115 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-17158 1 Microsoft 1 Dynamics 365 2025-08-28 8.8 High
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
CVE-2020-17152 1 Microsoft 1 Dynamics 365 2025-08-28 8.8 High
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
CVE-2020-17147 1 Microsoft 1 Dynamics 365 2025-08-28 8.7 High
Dynamics CRM Webclient Cross-site Scripting Vulnerability
CVE-2025-53728 1 Microsoft 1 Dynamics 365 2025-08-28 6.5 Medium
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to disclose information over a network.
CVE-2025-49745 1 Microsoft 1 Dynamics 365 2025-08-28 5.4 Medium
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-30391 1 Microsoft 1 Dynamics 365 Customer Service 2025-08-27 8.1 High
Improper input validation in Microsoft Dynamics allows an unauthorized attacker to disclose information over a network.
CVE-2022-41066 1 Microsoft 4 Dynamics 365 Business Central 2019, Dynamics 365 Business Central 2021, Dynamics 365 Business Central 2022 and 1 more 2025-08-25 4.4 Medium
Microsoft Business Central Information Disclosure Vulnerability
CVE-2025-29821 1 Microsoft 3 Dynamics 365 Business Central 2023, Dynamics 365 Business Central 2024, Dynamics 365 Business Central 2025 2025-08-12 5.5 Medium
Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally.
CVE-2022-41127 1 Microsoft 2 Dynamics 365 Business Central, Dynamics Nav 2025-07-22 8.5 High
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
CVE-2025-49715 1 Microsoft 1 Dynamics 365 2025-07-17 7.5 High
Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a network.
CVE-2024-35263 1 Microsoft 1 Dynamics 365 2025-07-16 5.7 Medium
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
CVE-2024-35249 1 Microsoft 1 Dynamics 365 Business Central 2025-07-16 8.8 High
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
CVE-2024-35248 1 Microsoft 1 Dynamics 365 Business Central 2025-07-16 7.3 High
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVE-2024-38211 1 Microsoft 1 Dynamics 365 2025-07-10 8.2 High
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2024-49053 1 Microsoft 1 Dynamics 365 Sales 2025-07-08 7.6 High
Microsoft Dynamics 365 Sales Spoofing Vulnerability
CVE-2024-21396 1 Microsoft 1 Dynamics 365 2025-05-09 7.6 High
Dynamics 365 Sales Spoofing Vulnerability
CVE-2024-21327 1 Microsoft 1 Dynamics 365 2025-05-09 7.6 High
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
CVE-2024-38182 1 Microsoft 1 Dynamics 365 2025-05-05 9 Critical
Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network.
CVE-2024-30061 1 Microsoft 1 Dynamics 365 2025-05-05 7.3 High
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
CVE-2024-21395 1 Microsoft 1 Dynamics 365 2025-05-03 8.2 High
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability