Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Dynamics 365 (on-premises) version 9.1 | 9.0 |
Added affected version 8.2, updated severity to HIGH, and noted no patch available.
Added a detailed description of the vulnerability and marked it as actively exploited with an exploit available.
Initial creation
