Cross-site Scripting Vulnerability Affects Microsoft Dynamics 365 (On-premises)

CVE-2024-21419

What is CVE-2024-21419?

A cross-site scripting vulnerability exists in Microsoft Dynamics 365 (on-premises) that could allow an attacker to execute arbitrary scripts in the context of a user's session. By exploiting this vulnerability, an unauthorized user could potentially gain access to sensitive information, manipulate user sessions, or redirect users to malicious websites. It is essential for organizations using affected versions of Microsoft Dynamics 365 to assess their security posture and apply the necessary mitigations to prevent exploitation.

References