Kaspersky Threats

Solutions for:

Kaspersky ID:

KLA11933

Detect Date:

08/11/2020

Updated:

01/25/2024

Description

A cross-site-scripting vulnerability was found in Microsoft Dynamics.Malicious users can exploit this vulnerability to spoof user interface.

Original advisories

CVE-2020-1591

CVE list

CVE-2020-1591
high

KB list

4541722

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!

Kaspersky ID:

KLA11933

Detect Date:

08/11/2020

Updated:

01/25/2024

Severity

high

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

XSS/CSS

Cross site scripting. Exploitation of vulnerabilities with this impact can lead to partial interception of information transmitted between user and site.

SUI

Spoof user interface. Exploitation of vulnerabilities with this impact can lead to changes in user interface to beguile user into inaccurate behavior.

Affected products

Microsoft Dynamics 365 (on-premises) version 9.0

Kaspersky Next

Let’s go Next: redefine your business’s cybersecurity

Learn more

New Kaspersky!

Your digital life deserves complete protection!

Learn more

Confirm changes?

Your message has been sent successfully.

XSS vulnerability in Microsoft Dynamics

Description

Original advisories

Related products

CVE list

KB list

Read more