CVE-2023-35335

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
MicrosoftMicrosoft Dynamics 365 (on-premises) version 9.0>= 9.0.0, < 9.0.47.08
MicrosoftMicrosoft Dynamics 365 (on-premises) version 9.1>= 9.0, < 9.1.18.22

References

Timeline

Published
Jul 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-353365.4Windows MSHTML Platform Security Feature Bypass VulnerabilityCVE-2023-353377.8Win32k Elevation of Privilege VulnerabilityCVE-2023-353387.5Windows Peer Name Resolution Protocol Denial of Service VulnerabilityCVE-2023-353397.5Windows CryptoAPI Denial of Service VulnerabilityCVE-2023-35347.5A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of theCVE-2023-353407.8Windows CNG Key Isolation Service Elevation of Privilege VulnerabilityCVE-2023-353415.5Microsoft DirectMusic Information Disclosure VulnerabilityCVE-2023-353427.8Windows Image Acquisition Elevation of Privilege VulnerabilityCVE-2023-353437.8Windows Geolocation Service Remote Code Execution VulnerabilityCVE-2023-353446.6Windows DNS Server Remote Code Execution VulnerabilityCVE-2023-353456.6Windows DNS Server Remote Code Execution VulnerabilityCVE-2023-353466.6Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-35335: High severity, CVSS 8.2 | Vulnix