CVE-2023-28313 - Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability

MEDIUM

Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability

Published Apr 11, 2023

6.1

MEDIUM

CVSS 3.1

EPSS 0.69%

Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability

Vendor Microsoft Product Send Customer Voice survey from Dynamics 365 Default
unknown
Affected
- ≥ 9.0.0.0, < 9.0.0.7

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Send Customer Voice survey from Dynamics 365	unknown	Affected ≥ 9.0.0.0, < 9.0.0.7

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32020		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28313		vendor-advisoryPatchVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Apr 11, 2023

Updated Feb 28, 2025

Reserved Mar 13, 2023

CISA Vulnrichment

Updated Feb 28, 2025

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Apr 11, 2023

Updated Feb 28, 2025

GitHub

No data