KLA11637
XSS vulnerability in Microsoft Dynamics
Обновлено: 22/05/2020
Дата обнаружения
14/01/2020
Уровень угрозы
High
Описание

A cross-site-scripting (XSS) vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to spoof user interface.

Пораженные продукты

Dynamics 365 Field Service (on-premises) v7 series

Решение

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Первичный источник обнаружения
CVE-2020-0656
Оказываемое влияние
?
SUI 
[?]
Связанные продукты
Microsoft Dynamics 365
CVE-IDS
CVE-2020-06560.0Unknown
Microsoft official advisories
Microsoft Security Update Guide