CVE-2023-28313

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
MicrosoftSend Customer Voice survey from Dynamics 365>= 9.0.0.0, < 9.0.0.7

References

Timeline

Published
Apr 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-283146.1Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-283169.8A security vulnerability has been discovered in the implementation of 2FA on the rocket.chat platform, where other active sessions are not iCVE-2023-283175.3A vulnerability has been discovered in Rocket.Chat, where editing messages can change the original timestamp, causing the UI to display messCVE-2023-283185.3A vulnerability has been discovered in Rocket.Chat, where messages can be hidden regardless of the Message_KeepHistory or Message_ShowDeleteCVE-2023-283197.5A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 2CVE-2023-28327.2SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0.CVE-2023-283205.9A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, seCVE-2023-283215.9An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as CVE-2023-283223.7An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callbackCVE-2023-283239.8A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. ThiCVE-2023-283249.8A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege escalation or remote cCVE-2023-283256.5An improper authorization vulnerability exists in Rocket.Chat <6.0 that could allow a hacker to manipulate the rid parameter and change the
CVE-2023-28313: Medium severity, CVSS 6.1 | Vulnix