What is CVE-2022-21957?

CVE-2022-21957 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Which CVE IDs does CVE-2022-21957 cover?

CVE-2022-21957 covers the following CVE IDs: CVE-2022-21957. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2022-21957?

CVE-2022-21957 has a CVSS v3 base score of 7.2, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2022-21957?

CVE-2022-21957 affects 2 products, including: Microsoft Dynamics 365 (on-premises) version 9.0; Microsoft Dynamics 365 (on-premises) version 9.1.

CVE-2022-21957HighCVSS 7.2

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

February 8, 2022

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2022-21957 →

📋 Description

Are the updates for the Microsoft Dynamics 365 (on-premises) versions listed in this vulnerability currently available? The security update for Microsoft Dynamics 365 (on-premises) version 9.0 and Microsoft Dynamics 365 (on-premises) version 9.1 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.

🎯 Affected products2

Microsoft Dynamics 365 (on-premises) version 9.0
Microsoft Dynamics 365 (on-premises) version 9.1

✅ Remediation

KB5012732 (Security Update) — fixed build 9.0.37.2 KB5012731 (Security Update) — fixed build 9.1.9.8

🔗 References (3)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21957
patchhttps://www.microsoft.com/en-us/download/details.aspx?id=104010
patchhttps://www.microsoft.com/en-us/download/details.aspx?id=104009