Read the docs
Microsoft update

KB5059086

Security Update

View on Microsoft →

Fixed in

Fixes 1 record

Priority LOW 25

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Dynamics 365 (on-premises) allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00582 Published 2025-08-12 Fixed in 9.1.38.10 CWE-79