CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 13/10/2021 |
| CVE-2021-36950 | MEDIUM5.4 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 12/08/2021 |
| CVE-2021-34524 | HIGH8.1 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | 12/08/2021 |
| CVE-2021-24101 | MEDIUM6.5 | Microsoft Dataverse Information Disclosure Vulnerability | 25/02/2021 |
| CVE-2020-17158 | HIGH8.8 | Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability | 10/12/2020 |
| CVE-2020-17152 | HIGH8.8 | Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability | 10/12/2020 |
| CVE-2020-17147 | HIGH8.7 | Dynamics CRM Webclient Cross-site Scripting Vulnerability | 10/12/2020 |
| CVE-2020-17021 | MEDIUM5.4 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 11/11/2020 |
| CVE-2020-17018 | MEDIUM5.4 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 11/11/2020 |
| CVE-2020-17005 | MEDIUM5.4 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 11/11/2020 |
| CVE-2020-16978 | MEDIUM5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 16/10/2020 |
| CVE-2020-16956 | MEDIUM5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 16/10/2020 |
| CVE-2020-16878 | MEDIUM5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 11/09/2020 |
| CVE-2020-16872 | HIGH7.6 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 11/09/2020 |
| CVE-2020-16871 | MEDIUM5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 11/09/2020 |
| CVE-2020-16864 | MEDIUM5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 11/09/2020 |