Microsoft Dynamics 365 vulnerabilities
16 known CVE vulnerabilities in Microsoft Dynamics 365, translated and rated.
- CVE-2026-47647Critical
Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.
- CVE-2026-66301Medium
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.
- CVE-2026-65815High
Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.
- CVE-2026-40371High
A vulnerability in Microsoft Dynamics 365 (on-premises) related to improper permission handling allows an authorized attacker to elevate privileges over a network.
- CVE-2026-33103Medium
Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.
- CVE-2024-43476High
Cross-site Scripting (XSS) vulnerability in Microsoft Dynamics 365 (on-premises). Allows an attacker to inject malicious script into the page.
- CVE-2024-35263Medium
An information disclosure vulnerability in Microsoft Dynamics 365 (On-Premises) allows unauthorized users to access sensitive data. The flaw stems from improper access control management of system resources.
- CVE-2023-21807Medium
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.
- CVE-2023-21573Medium
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.
- CVE-2023-21572Medium
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.
- CVE-2023-21571Medium
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.
- CVE-2023-21570Medium
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.
- CVE-2021-42316High
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability. An attacker could exploit this vulnerability to execute code remotely in the Dynamics 365 environment.
- CVE-2021-36950Medium
Cross-site scripting (XSS) vulnerability in Microsoft Dynamics 365 (on-premises). Allows injection of malicious script into the application.
- CVE-2021-34524High
Remote code execution vulnerability in Microsoft Dynamics 365 On-Premises. An attacker could exploit this flaw to execute code remotely.
- CVE-2020-1063Medium
Cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises) due to improper sanitization of crafted web requests. An authenticated attacker could perform XSS attacks and run scripts in the security context of the current authenticated user.