Cross-site Scripting Vulnerability Affects Microsoft Dynamics 365 (On-premises)
CVE-2024-21419
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 12 March 2024
What is CVE-2024-21419?
A cross-site scripting vulnerability exists in Microsoft Dynamics 365 (on-premises) that could allow an attacker to execute arbitrary scripts in the context of a user's session. By exploiting this vulnerability, an unauthorized user could potentially gain access to sensitive information, manipulate user sessions, or redirect users to malicious websites. It is essential for organizations using affected versions of Microsoft Dynamics 365 to assess their security posture and apply the necessary mitigations to prevent exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Microsoft Dynamics 365 (on-premises) version 9.1 Unknown 9.0 < 9.1.26
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved