CVE-2023-35621 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
microsoft	CNA	7.5 HIGH				CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 66%

Vendor	Product	Version
microsoft	dynamics_365	-
microsoft	dynamics_365	10.0.37
microsoft	dynamics_365	10.0.38

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-799 - Improper Control of Interaction Frequency
The software does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35621

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35621