Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

CVE-2024-21393

Summary

A Cross-site Scripting vulnerability in Microsoft Dynamics 365 (on-premises) allows attackers to inject malicious scripts into web pages viewed by users. This vulnerability can lead to unauthorized access to sensitive information, session hijacking, or further exploitation of the affected environment. It is crucial for users of affected versions to implement appropriate security measures to mitigate potential attacks. Regular monitoring and applying security updates as recommended by the vendor are vital for maintaining the integrity and security of your systems.

References