What is CVE-2020-17147?

CVE-2020-17147 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Dynamics CRM Webclient Cross-site Scripting Vulnerability

Which CVE IDs does CVE-2020-17147 cover?

CVE-2020-17147 covers the following CVE IDs: CVE-2020-17147. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2020-17147?

CVE-2020-17147 has a CVSS v3 base score of 8.7, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2020-17147?

CVE-2020-17147 affects 2 products, including: Microsoft Dynamics 365 (on-premises) version 8.2; Microsoft Dynamics 365 (on-premises) version 9.0.

CVE-2020-17147HighCVSS 8.7

Dynamics CRM Webclient Cross-site Scripting Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

December 8, 2020

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2020-17147 →

📋 Description

What privileges are required to exploit this vulnerability? To exploit this vulnerability, an attacker would be required to have a System Customizer OR Administrator role.

🎯 Affected products2

Microsoft Dynamics 365 (on-premises) version 8.2
Microsoft Dynamics 365 (on-premises) version 9.0

✅ Remediation

KB4595462 (Security Update) KB4595459 (Security Update)

🔗 References (5)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17147
patchhttps://www.microsoft.com/en-us/download/details.aspx?id=102431
referencehttps://support.microsoft.com/en-us/help/4595462
patchhttps://www.microsoft.com/en-us/download/details.aspx?id=102432
referencehttps://support.microsoft.com/en-us/help/4595459