Advisories · Technology

Microsoft Dynamics 365 (on-premises) version 9.1.

Every CVE that names Microsoft Dynamics 365 (on-premises) version 9.1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-65772 CVE record

CVSS 8.8 High

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Insecure deserialization
Not analysed yet 8 Sept 2026
CVE-2026-66301 CVE record

CVSS 6.5 Medium

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Information disclosure
Not analysed yet 11 Aug 2026
CVE-2026-65815 CVE record

CVSS 8.8 High

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Insecure deserialization
Not analysed yet 11 Aug 2026
CVE-2026-40371 CVE record

CVSS 8.8 High

Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- CWE-280
Not analysed yet 9 Jun 2026
CVE-2026-42833 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Privilege escalation
Not analysed yet 12 May 2026
CVE-2026-42898 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Code injection
Not analysed yet 12 May 2026
CVE-2025-62206 CVE record

CVSS 6.5 Medium

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Information disclosure
Not analysed yet 11 Nov 2025
CVE-2025-53728 CVE record

CVSS 6.5 Medium

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Information disclosure
Not analysed yet 12 Aug 2025
CVE-2025-49745 CVE record

CVSS 5.4 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 12 Aug 2025
CVE-2024-43476 CVE record

CVSS 7.6 High

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 10 Sept 2024
CVE-2024-38211 CVE record

CVSS 8.2 High

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Open redirect
Not analysed yet 13 Aug 2024
CVE-2024-30061 CVE record

CVSS 7.3 High

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Broken access control
Not analysed yet 9 Jul 2024
CVE-2024-35263 CVE record

CVSS 5.7 Medium

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Information disclosure
Not analysed yet 11 Jun 2024
CVE-2024-21419 CVE record

CVSS 7.6 High

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 12 Mar 2024
CVE-2024-21395 CVE record

CVSS 8.2 High

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 13 Feb 2024
CVE-2024-21328 CVE record

CVSS 7.6 High

Dynamics 365 Sales Spoofing Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 13 Feb 2024
CVE-2024-21396 CVE record

CVSS 7.6 High

Dynamics 365 Sales Spoofing Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 13 Feb 2024
CVE-2024-21394 CVE record

CVSS 7.6 High

Dynamics 365 Field Service Spoofing Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 13 Feb 2024
CVE-2024-21393 CVE record

CVSS 7.6 High

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 13 Feb 2024
CVE-2024-21389 CVE record

CVSS 7.6 High

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 13 Feb 2024
CVE-2023-36020 CVE record

CVSS 7.6 High

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Microsoft Dynamics 365 (on-premises) version 9.0
- Cross-site scripting (XSS)
Not analysed yet 12 Dec 2023
CVE-2023-36016 CVE record

CVSS 6.2 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 14 Nov 2023
CVE-2023-36031 CVE record

CVSS 7.6 High

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 14 Nov 2023
CVE-2023-36030 CVE record

CVSS 6.1 Medium

Microsoft Dynamics 365 Sales Spoofing Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Microsoft Dynamics 365 (on-premises) version 9.0
- Cross-site scripting (XSS)
Not analysed yet 14 Nov 2023
CVE-2023-36410 CVE record

CVSS 7.6 High

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 14 Nov 2023
CVE-2023-36416 CVE record

CVSS 6.1 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Microsoft Dynamics 365 (on-premises) version 9.0
- Cross-site scripting (XSS)
Not analysed yet 10 Oct 2023
CVE-2023-36429 CVE record

CVSS 6.5 Medium

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
- Other injection
Not analysed yet 10 Oct 2023
CVE-2023-36433 CVE record

CVSS 6.5 Medium

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
- Other injection
Not analysed yet 10 Oct 2023
CVE-2023-38164 CVE record

CVSS 7.6 High

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Microsoft Dynamics 365 (on-premises) version 9.0
- Cross-site scripting (XSS)
Not analysed yet 12 Sept 2023
CVE-2023-36886 CVE record

CVSS 7.6 High

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Microsoft Dynamics 365 (on-premises) version 9.0
- Cross-site scripting (XSS)
Not analysed yet 12 Sept 2023
CVE-2023-35335 CVE record

CVSS 8.2 High

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 11 Jul 2023
CVE-2023-33171 CVE record

CVSS 8.2 High

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 11 Jul 2023
CVE-2023-28314 CVE record

CVSS 6.1 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 11 Apr 2023
CVE-2023-28309 CVE record

CVSS 7.6 High

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 11 Apr 2023
CVE-2023-24891 CVE record

CVSS 5.4 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Microsoft Dynamics 365 (on-premises) version 9.0
- Cross-site scripting (XSS)
Not analysed yet 14 Mar 2023
CVE-2023-24922 CVE record

CVSS 6.5 Medium

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
- Other injection
Not analysed yet 14 Mar 2023
CVE-2023-24921 CVE record

CVSS 5.4 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 14 Mar 2023
CVE-2023-24920 CVE record

CVSS 5.4 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Microsoft Dynamics 365 (on-premises) version 9.0
- Cross-site request forgery (CSRF)
Not analysed yet 14 Mar 2023
CVE-2023-24879 CVE record

CVSS 5.4 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 14 Mar 2023
CVE-2023-24919 CVE record

CVSS 5.4 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 14 Mar 2023
CVE-2023-21573 CVE record

CVSS 5.4 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
Not analysed yet 14 Feb 2023
CVE-2023-21572 CVE record

CVSS 6.5 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
Not analysed yet 14 Feb 2023
CVE-2023-21571 CVE record

CVSS 5.4 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 14 Feb 2023
CVE-2023-21570 CVE record

CVSS 5.4 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 14 Feb 2023
CVE-2023-21807 CVE record

CVSS 6.5 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
- Cross-site scripting (XSS)
Not analysed yet 14 Feb 2023
CVE-2022-23259 CVE record

CVSS 8.8 High

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
Not analysed yet 15 Apr 2022
CVE-2022-21957 CVE record

CVSS 7.2 High

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
Not analysed yet 9 Feb 2022
CVE-2021-42316 CVE record

CVSS 8.8 High

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
Not analysed yet 10 Nov 2021
CVE-2021-41354 CVE record

CVSS 5.4 Medium

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
Not analysed yet 13 Oct 2021
CVE-2021-41353 CVE record

CVSS 5.4 Medium

Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
Not analysed yet 13 Oct 2021
CVE-2021-34524 CVE record

CVSS 8.1 High

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.0
- Microsoft Dynamics 365 (on-premises) version 9.1
Not analysed yet 12 Aug 2021