CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 13/10/2021 |
| CVE-2021-36950 | 中危5.4 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 12/08/2021 |
| CVE-2021-34524 | 高危8.1 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | 12/08/2021 |
| CVE-2021-24101 | 中危6.5 | Microsoft Dataverse Information Disclosure Vulnerability | 25/02/2021 |
| CVE-2020-17158 | 高危8.8 | Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability | 10/12/2020 |
| CVE-2020-17152 | 高危8.8 | Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability | 10/12/2020 |
| CVE-2020-17147 | 高危8.7 | Dynamics CRM Webclient Cross-site Scripting Vulnerability | 10/12/2020 |
| CVE-2020-17021 | 中危5.4 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 11/11/2020 |
| CVE-2020-17018 | 中危5.4 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 11/11/2020 |
| CVE-2020-17005 | 中危5.4 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 11/11/2020 |
| CVE-2020-16978 | 中危5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 16/10/2020 |
| CVE-2020-16956 | 中危5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 16/10/2020 |
| CVE-2020-16878 | 中危5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 11/09/2020 |
| CVE-2020-16872 | 高危7.6 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 11/09/2020 |
| CVE-2020-16871 | 中危5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 11/09/2020 |
| CVE-2020-16864 | 中危5.4 | <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p>
<p>The | 11/09/2020 |