CVE-2018-8609 - A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Remote Code Execution Vulnerability." This affects Microsoft Dynamics 365

Back Back to CVE browser

HIGH

A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Remote Code Execution Vulnerability." This affects Microsoft Dynamics 365

Published Nov 14, 2018

8.8

HIGH

CVSS 3.0

EPSS 9.90%

Description

A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Remote Code Execution Vulnerability." This affects Microsoft Dynamics 365.

Affected products

Vendor Microsoft Product Microsoft Dynamics 365 Default
unknown
Affected
- premises) version 8

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Microsoft Dynamics 365	unknown	Affected premises) version 8

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-116

References (3)

http://www.securityfocus.com/bid/105894
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-20224
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8609
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/105894		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-20224		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8609		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Nov 14, 2018

Updated Aug 5, 2024

Reserved Mar 14, 2018

Link CVE-2018-8609

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-8609

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Nov 14, 2018

Updated Aug 5, 2024

Link EUVD-2018-20224

GitHub

No data