CVE-2023-36007

MediumCVSS 4.1/10Last modified Jun 17, 2026

Description

Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability

Metrics

CVSS 3.1 4.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-360086.6Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2023-360095.5Microsoft Word Information Disclosure VulnerabilityCVE-2023-36014.3The Simple Author Box WordPress plugin before 2.52 does not verify a user ID before outputting information about that user, leading to arbitCVE-2023-360107.5Microsoft Defender Denial of Service VulnerabilityCVE-2023-360117.8Win32k Elevation of Privilege VulnerabilityCVE-2023-360125.3DHCP Server Service Information Disclosure VulnerabilityCVE-2023-360136.5PowerShell Information Disclosure VulnerabilityCVE-2023-360147.3Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2023-360163.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-360178.8Windows Scripting Engine Memory Corruption VulnerabilityCVE-2023-360189.8Visual Studio Code Jupyter Extension Spoofing VulnerabilityCVE-2023-360197.4Microsoft Power Platform Connector Spoofing Vulnerability
CVE-2023-36007: Medium severity, CVSS 4.1 | Vulnix