CVE-2021-40457

HighCVSS 7.4/10Last modified Jun 17, 2026

Description

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
MicrosoftMicrosoft Dynamics 365 Customer Engagement V9.1>= 9.0, < 9.1.4
MicrosoftMicrosoft Dynamics 365 Customer Engagement V9.0>= 9.0.0, < 9.0.31.7

References

Timeline

Published
Oct 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-40465.4The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability could be uCVE-2021-404606.5Windows Remote Procedure Call Runtime Security Feature Bypass VulnerabilityCVE-2021-404618.0Windows Hyper-V Remote Code Execution VulnerabilityCVE-2021-404627.8Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution VulnerabilityCVE-2021-404637.7Windows Network Address Translation (NAT) Denial of Service VulnerabilityCVE-2021-404648.0Windows Nearby Sharing Elevation of Privilege VulnerabilityCVE-2021-404657.8Windows Text Shaping Remote Code Execution VulnerabilityCVE-2021-404667.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2021-404677.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2021-404685.5Windows Bind Filter Driver Information Disclosure VulnerabilityCVE-2021-404697.2Windows DNS Server Remote Code Execution VulnerabilityCVE-2021-40477.5The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was missing. This issue
CVE-2021-40457: High severity, CVSS 7.4 | Vulnix