Microsoft Dynamics 365
Moderate fix1 remedy
cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:*:*:*
Moderate fix1 remedy
Microsoft Dynamics 365 (On-Premises) Cross-Site Scripting Vulnerability Allowing Spoofing
Vulnerability
Patched
A cross-site scripting vulnerability has been identified in Microsoft Dynamics 365 (on-premises) version 9.1. This issue arises from improper neutralization of input during web page generation, allowing an unauthorized attacker to perform spoofing over the network.
Impact
Exploitation of this vulnerability could lead to spoofing attacks, allowing an attacker to impersonate another user or entity.
Remediation
Users can apply the security update available through the Microsoft Update Catalog to address this vulnerability.
Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
4.4remediation
7.7relevance
0.4threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.