CVE Catalog
CVE-2021-36950
MediumCVSS 5.4Exploitation Probability (EPSS)
Elevated risk0.95%
58th percentile - higher than 58% of all known CVEs
Summary
Cross-site scripting (XSS) vulnerability in Microsoft Dynamics 365 (on-premises). Allows injection of malicious script into the application.
Risk Assessment
An attacker can steal user data, hijack sessions, or spread malicious content within the organization.
Recommendation
Apply patches provided by Microsoft for Dynamics 365 and consider additional security measures such as input filtering.
Original NVD description (English source)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability