Microsoft Dynamics 365 Server vulnerabilities

2 CVEs affecting Microsoft Dynamics 365 Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1050, published 2020-04-15.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-1050, published 2020-04-15. Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days. A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft…
• CVE-2020-1049, published 2020-04-15. Medium severity, CVSS 5.4. EPSS: 1.5% chance of exploitation in the next 30 days. A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft…