CVE-2018-8606

https://notcve.org/view.php?id=CVE-2018-8606

14 Nov 2018 — A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8605, CVE-2018-8607, CVE-2018-8608. Existe una vulnerabilidad Cross-Site Scripting (XSS) cuando Microsoft Dynamics 365 (on-premises), versión 8, no sanea correctam... • http://www.securityfocus.com/bid/105890 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •