Microsoft Dynamics CRM 2015 vulnerabilities

2 CVEs affecting Microsoft Dynamics CRM 2015, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-17006, published 2020-11-11.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-1008, published 2019-05-16. Medium severity, CVSS 5.9. EPSS: 2.8% chance of exploitation in the next 30 days. A security feature bypass vulnerability exists in Dynamics On Premise, aka 'Microsoft Dynamics On-Premise Security Feature Bypass'.
• CVE-2020-17006, published 2020-11-11. Medium severity, CVSS 5.4. EPSS: 1.4% chance of exploitation in the next 30 days. Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability