Microsoft update

KB5026500

Security Update

Fixed in

TI-2023-17674 CVE-2023-35335 · GHSA-24cr-56gf-fx38

LOW 37

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00803 Published 2023-07-11 Fixed in 9.0.47.08, 9.1.18.22 CWE-79

TI-2023-16348 CVE-2023-33171 · GHSA-j93g-wppp-w3v6

LOW 37

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00673 Published 2023-07-11 Fixed in 9.0.47.08, 9.1.18.22 CWE-79

TI-2023-17724 CVE-2023-35389 · GHSA-vx8f-24wp-mfwj

LOW 30

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0076 Published 2023-08-08 Fixed in 9.0.47.08 CWE-611

TI-2023-18277 CVE-2023-36416 · GHSA-947g-33c8-hf86

LOW 29

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00874 Published 2023-10-10 Fixed in 9.1.18.22, 9.0.47.08 CWE-79