Microsoft · Security update · March 14, 2023
KB5023505: March 2023 security update
KB5023505, released March 14, 2023, fixes 11 CVEs in Microsoft Dynamics 365 (on-premises) version 9.1. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.
RoutineUnsupported product
CVEs closed
11
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0146
73rd percentile
Priority of the 11 CVEs
Patch now 0
Urgent 0
High 0
Routine 11
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Routine | CVE-2023-24922 | Microsoft Dynamics | Information Disclosure | 6.5 | 0.0146 | Exploitation Less Likely |
| Routine | CVE-2023-21807 | Microsoft Dynamics | Spoofing | 6.5 | 0.0065 | Exploitation Less Likely |
| Routine | CVE-2023-21572 | Microsoft Dynamics | Spoofing | 6.5 | 0.0061 | Exploitation Less Likely |
| Routine | CVE-2023-21570 | Microsoft Dynamics | Spoofing | 5.4 | 0.0061 | Exploitation Less Likely |
| Routine | CVE-2023-21571 | Microsoft Dynamics | Spoofing | 5.4 | 0.0061 | Exploitation Less Likely |
| Routine | CVE-2023-21573 | Microsoft Dynamics | Spoofing | 5.4 | 0.0061 | Exploitation Less Likely |
| Routine | CVE-2023-24879 | Microsoft Dynamics | Spoofing | 5.4 | 0.0061 | Exploitation Less Likely |
| Routine | CVE-2023-24891 | Microsoft Dynamics | Spoofing | 5.4 | 0.0061 | Exploitation Less Likely |
| Routine | CVE-2023-24919 | Microsoft Dynamics | Spoofing | 5.4 | 0.0061 | Exploitation Less Likely |
| Routine | CVE-2023-24921 | Microsoft Dynamics | Spoofing | 5.4 | 0.0061 | Exploitation Less Likely |
| Routine | CVE-2023-24920 | Microsoft Dynamics | Spoofing | 5.4 | 0.0031 | Exploitation Less Likely |
Showing 1 to 11 of 11
1