Brad Schlintz

**Name of the Vulnerable Software and Affected Versions** Microsoft Dynamics 365 (affected versions not specified) **Description** Improper access control allows an authorized attacker to elevate privileges over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Dynamics 365 (Online) (affected versions not specified) **Description** A server-side request forgery (SSRF) allows an unauthorized attacker to perform spoofing over a network. SSRF is a flaw where an attacker can force a server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.