Microsoft · Security update · April 12, 2022

KB5012731: April 2022 security update

KB5012731, released April 12, 2022, fixes 2 CVEs in Microsoft Dynamics 365 (on-premises) version 9.1. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
2
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0287
86th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 1 High 1 Routine 0

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2022-23259 Microsoft Dynamics Remote Code Execution 8.8 0.0287 Exploitation Less Likely
High CVE-2022-21957 Microsoft Dynamics Remote Code Execution 7.2 0.0272 Exploitation Less Likely
Showing 1 to 2 of 2 1