Microsoft update

KB5023505

Security Update

View on Microsoft →

Fixed in

Microsoft Dynamics 365 (on-premises) version 9.1 9.1.16.20

Fixes 11 records

TI-2023-10409 CVE-2023-24922 · GHSA-v8pf-gf4j-jvqv

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

LOW 32

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01461 Published 2023-03-14 Fixed in 9.0.45.11, 9.1.16.20 CWE-643

TI-2023-08188 CVE-2023-21807 · GHSA-92hh-rqgh-jrm2

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

LOW 30

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00654 Published 2023-02-14 Fixed in 9.0.45.11, 9.1.16.20 CWE-79

TI-2023-07966 CVE-2023-21572 · GHSA-frq3-2crv-2672

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

LOW 30

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00611 Published 2023-02-14 Fixed in 9.0.45.11, 9.1.16.20 CWE-79

TI-2023-10408 CVE-2023-24921 · GHSA-6796-c5x8-963q

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

LOW 25

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00609 Published 2023-03-14 Fixed in 9.0.45.11, 9.1.16.20 CWE-79

TI-2023-10406 CVE-2023-24919 · GHSA-cxpj-cm5p-xpg3

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

LOW 25

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00609 Published 2023-03-14 Fixed in 9.0.45.11, 9.1.16.20 CWE-79

TI-2023-10383 CVE-2023-24891 · GHSA-6457-jqhp-fr49

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

LOW 25

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00609 Published 2023-03-14 Fixed in 9.1.16.20, 9.0.45.11 CWE-79

TI-2023-10373 CVE-2023-24879 · GHSA-h6wq-22q8-6xpw

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

LOW 25

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00609 Published 2023-03-14 Fixed in 9.0.45.11, 9.1.16.20 CWE-79

TI-2023-07967 CVE-2023-21573 · GHSA-wpp3-4hgh-2h7m

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

LOW 25

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00609 Published 2023-02-14 Fixed in 9.0.45.11, 9.1.16.20 CWE-79

TI-2023-07965 CVE-2023-21571 · GHSA-8v5w-w438-m56j

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

LOW 25

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00609 Published 2023-02-14 Fixed in 9.0.45.11, 9.1.16.20 CWE-79

TI-2023-07964 CVE-2023-21570 · GHSA-c5gq-pm98-525g

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

LOW 25

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00609 Published 2023-02-14 Fixed in 9.0.45.11, 9.1.16.20 CWE-79

TI-2023-10407 CVE-2023-24920 · GHSA-gf79-pr99-3gvq

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

LOW 24

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00311 Published 2023-03-14 Fixed in 9.1.16.20, 9.0.45.11 CWE-352