Microsoft Dynamics 365 vulnerabilities

Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.

Improper control of code generation (code injection) in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.

Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

A vulnerability in Microsoft Dynamics 365 (on-premises) related to improper permission handling allows an authorized attacker to elevate privileges over a network.

Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.

Cross-site Scripting (XSS) vulnerability in Microsoft Dynamics 365 (on-premises). Allows an attacker to inject malicious script into the page.

An information disclosure vulnerability in Microsoft Dynamics 365 (On-Premises) allows unauthorized users to access sensitive data. The flaw stems from improper access control management of system resources.

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability. An attacker could exploit this vulnerability to execute code remotely in the Dynamics 365 environment.

Cross-site scripting (XSS) vulnerability in Microsoft Dynamics 365 (on-premises). Allows injection of malicious script into the application.

Remote code execution vulnerability in Microsoft Dynamics 365 On-Premises. An attacker could exploit this flaw to execute code remotely.

Cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises) due to improper sanitization of crafted web requests. An authenticated attacker could perform XSS attacks and run scripts in the security context of the current authenticated user.