Vulnerability Details CVE-2024-38166
An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft Dynamics 365 to spoof over a network by tricking a user to click on a link.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.7%
CVSS Severity
CVSS v3 Score 8.2
Products affected by CVE-2024-38166
-
cpe:2.3:a:microsoft:dynamics_crm_service_portal_web_resource:-