KLA61976
Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface.

Below is a complete list of vulnerabilities:

1. A cross-site-scripting (XSS) vulnerability Microsoft Dynamics 365 (on-premises) can be exploited remotely to spoof user interface.
2. A spoofing vulnerability in Microsoft Dynamics 365 Sales can be exploited remotely to spoof user interface.
3. A spoofing vulnerability in Microsoft Send Customer Voice survey from Dynamics 365 can be exploited remotely to spoof user interface.

Send Customer Voice survey from Dynamics 365 app
Microsoft Dynamics 365 (on-premises) version 9.1
Microsoft Dynamics 365 (on-premises) version 9.0

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

5032297
5032298