GCVE-VVD-NCSC-2024-338

Advisory PublishedCVSS 8.2/10

Vulnetix · Advisory published August 13, 2024

Microsoft heeft kwetsbaarheden verholpen in Dynamics.

Weaknesses (CWE)

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-601URL Redirection to Untrusted Site ('Open Redirect')

Risk Scores

CVSS 3.1

8.2/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Affected Products

Vendor	Product	Versions	Platforms
microsoft	dynamics_crm_service_portal_web_resource	—	—
microsoft	dynamics_365	—	—
microsoft	microsoft_dynamics_365__on-premises__version_9.1	—	—

Aliases

CVE-2024-38166 CVE-2024-38211

Transitive aliases

MSRC_CVE-2024-38166 VVD-CISA-2024-38211 BDU:2024-06438 WID-SEC-W-2024-1778 GHSA-9x8m-8qxp-gj73 EUVD-2024-37178 BDU:2024-07801 CNVD-2024-40537 WID-SEC-W-2024-1824 VVD-CISA-2024-38166 MSRC_CVE-2024-38211 GHSA-v68h-j2w8-x6w3 CNVD-2024-40538 EUVD-2024-37139

References

advisory

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON