CVE-2024-38211

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Weakness enumeration

CWE-601CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 13, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-382128.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-382136.5Windows Mark of the Web Security Feature Bypass VulnerabilityCVE-2024-382146.5Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityCVE-2024-382157.8Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityCVE-2024-382169.0Azure Stack Hub Elevation of Privilege VulnerabilityCVE-2024-382175.4Windows Mark of the Web Security Feature Bypass VulnerabilityCVE-2024-382187.8Microsoft Edge (HTML-based) Memory Corruption VulnerabilityCVE-2024-382199.0Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2024-38224.8The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not sanitise and escape a parameter before outputting it back in the page, leCVE-2024-382209.0Azure Stack Hub Elevation of Privilege VulnerabilityCVE-2024-382214.3Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2024-382226.5Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2024-38211: High severity, CVSS 8.2 | Vulnix