Microsoft update

KB5035110

Security Update

Fixed in

TI-2024-14155 CVE-2024-21395 · GHSA-hrqx-cgrg-w5g9

LOW 38

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.0114 Published 2024-02-13 Fixed in 9.1.25.17 CWE-79

TI-2024-14156 CVE-2024-21396 · GHSA-76w3-qpqm-hj57

LOW 36

Dynamics 365 Sales Spoofing Vulnerability

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.01158 Published 2024-02-13 Fixed in 9.1.25.17 CWE-79

TI-2024-14153 CVE-2024-21393 · GHSA-wrwv-3pqq-rr32

LOW 36

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.01158 Published 2024-02-13 Fixed in 9.1.25.17 CWE-79

TI-2024-14149 CVE-2024-21389 · GHSA-fv4p-ghwr-3g9x

LOW 36

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.01158 Published 2024-02-13 Fixed in 9.1.25.17 CWE-79

TI-2024-14088 CVE-2024-21328 · GHSA-wg5g-2465-7f45

LOW 36

Dynamics 365 Sales Spoofing Vulnerability

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.01316 Published 2024-02-13 Fixed in 9.1.25.17 CWE-79

TI-2024-14087 CVE-2024-21327 · GHSA-77fr-m2wv-vvvh

LOW 36

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.01289 Published 2024-02-13 Fixed in 9.1.25.17 CWE-79

TI-2024-14154 CVE-2024-21394 · GHSA-9wcf-3gfm-37qh

LOW 35

Dynamics 365 Field Service Spoofing Vulnerability

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.01117 Published 2024-02-13 Fixed in 9.1.25.17 CWE-79