Searching
..

Click anywhere to stop

KLA48838
Multiple vulnerabilities in Microsoft Dynamics

Обновлено: 25/01/2024
Дата обнаружения
11/04/2023
Уровень угрозы
High
Описание

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface.

Below is a complete list of vulnerabilities:

  1. A cross-site-scripting (XSS) vulnerability Microsoft Dynamics 365 Customer Voice can be exploited remotely to spoof user interface.
  2. A cross-site-scripting (XSS) vulnerability Microsoft Dynamics 365 (on-premises) can be exploited remotely to spoof user interface.
Пораженные продукты

Microsoft Dynamics 365 (on-premises) version 9.0
Send Customer Voice survey from Dynamics 365
Microsoft Dynamics 365 (on-premises) version 9.1

Решение

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Первичный источник обнаружения
CVE-2023-28313
CVE-2023-28314
CVE-2023-28309
Оказываемое влияние
?
XSS/CSS 
[?]

SUI 
[?]
Связанные продукты
Microsoft Dynamics 365
CVE-IDS
KB list

5023894
5023896