Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVE-2023-38164

What is CVE-2023-38164?

This vulnerability allows an attacker to inject malicious scripts into web pages displayed to users of Microsoft Dynamics 365 (on-premises). An attacker exploiting this vulnerability can execute unauthorized actions on behalf of a user, potentially exposing sensitive user data or facilitating phishing attacks. It's critical for organizations using Dynamics 365 (on-premises) to apply the latest security updates and best practices to mitigate these risks.

References