First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-36433

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Dynamics 365 (on-premises) version 9.0	>= 9.0.0, < 9.0.49.04
Microsoft	Microsoft Dynamics 365 (on-premises) version 9.1	>= 9.0, < 9.1.21.05

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36433Patch, Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36433Patch, Vendor Advisory

Timeline

Published: Oct 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-364349.8Windows IIS Server Elevation of Privilege Vulnerability CVE-2023-364357.5Microsoft QUIC Denial of Service Vulnerability CVE-2023-364367.8Windows MSHTML Platform Remote Code Execution Vulnerability CVE-2023-364378.8Azure DevOps Server Remote Code Execution Vulnerability CVE-2023-364387.5Windows TCP/IP Information Disclosure Vulnerability CVE-2023-364398.0Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2023-36449.8A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability aff CVE-2023-36454.8The Contact Form Builder by Bit Form WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow high CVE-2023-364567.3authentik is an open-source Identity Provider. Prior to versions 2023.4.3 and 2023.5.5, authentik does not verify the source of the X-Forwar CVE-2023-364578.81Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craf CVE-2023-364588.81Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craf CVE-2023-364596.1Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 1.3 and prior to versions 3.5.9, 4.0.5, and