Search
Search Results (115 CVEs found)
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2020-17158 | 1 Microsoft | 1 Dynamics 365 | 2025-08-28 | 8.8 High |
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability | ||||
CVE-2020-17152 | 1 Microsoft | 1 Dynamics 365 | 2025-08-28 | 8.8 High |
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability | ||||
CVE-2020-17147 | 1 Microsoft | 1 Dynamics 365 | 2025-08-28 | 8.7 High |
Dynamics CRM Webclient Cross-site Scripting Vulnerability | ||||
CVE-2025-53728 | 1 Microsoft | 1 Dynamics 365 | 2025-08-28 | 6.5 Medium |
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to disclose information over a network. | ||||
CVE-2025-49745 | 1 Microsoft | 1 Dynamics 365 | 2025-08-28 | 5.4 Medium |
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to perform spoofing over a network. | ||||
CVE-2025-30391 | 1 Microsoft | 1 Dynamics 365 Customer Service | 2025-08-27 | 8.1 High |
Improper input validation in Microsoft Dynamics allows an unauthorized attacker to disclose information over a network. | ||||
CVE-2022-41066 | 1 Microsoft | 4 Dynamics 365 Business Central 2019, Dynamics 365 Business Central 2021, Dynamics 365 Business Central 2022 and 1 more | 2025-08-25 | 4.4 Medium |
Microsoft Business Central Information Disclosure Vulnerability | ||||
CVE-2025-29821 | 1 Microsoft | 3 Dynamics 365 Business Central 2023, Dynamics 365 Business Central 2024, Dynamics 365 Business Central 2025 | 2025-08-12 | 5.5 Medium |
Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally. | ||||
CVE-2022-41127 | 1 Microsoft | 2 Dynamics 365 Business Central, Dynamics Nav | 2025-07-22 | 8.5 High |
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability | ||||
CVE-2025-49715 | 1 Microsoft | 1 Dynamics 365 | 2025-07-17 | 7.5 High |
Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a network. | ||||
CVE-2024-35263 | 1 Microsoft | 1 Dynamics 365 | 2025-07-16 | 5.7 Medium |
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | ||||
CVE-2024-35249 | 1 Microsoft | 1 Dynamics 365 Business Central | 2025-07-16 | 8.8 High |
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability | ||||
CVE-2024-35248 | 1 Microsoft | 1 Dynamics 365 Business Central | 2025-07-16 | 7.3 High |
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | ||||
CVE-2024-38211 | 1 Microsoft | 1 Dynamics 365 | 2025-07-10 | 8.2 High |
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | ||||
CVE-2024-49053 | 1 Microsoft | 1 Dynamics 365 Sales | 2025-07-08 | 7.6 High |
Microsoft Dynamics 365 Sales Spoofing Vulnerability | ||||
CVE-2024-21396 | 1 Microsoft | 1 Dynamics 365 | 2025-05-09 | 7.6 High |
Dynamics 365 Sales Spoofing Vulnerability | ||||
CVE-2024-21327 | 1 Microsoft | 1 Dynamics 365 | 2025-05-09 | 7.6 High |
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability | ||||
CVE-2024-38182 | 1 Microsoft | 1 Dynamics 365 | 2025-05-05 | 9 Critical |
Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network. | ||||
CVE-2024-30061 | 1 Microsoft | 1 Dynamics 365 | 2025-05-05 | 7.3 High |
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | ||||
CVE-2024-21395 | 1 Microsoft | 1 Dynamics 365 | 2025-05-03 | 8.2 High |
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |