CVE-2024-38166: Microsoft Dynamics 365 Cross-site Scripting Vulnerability
8.2
CVSS
Description
An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft Dynamics 365 to spoof over a network by tricking a user to click on a link.
Classification
CVE ID: CVE-2024-38166
CVSS Base Severity: HIGH
CVSS Base Score: 8.2
Affected Products
Vendor: Microsoft
Product: Dynamics CRM Service Portal Web Resource
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.08% (probability of being exploited)
EPSS Percentile: 37.37% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)