Marios Gyftos

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** Microsoft Exchange Server contains a server-side request forgery (SSRF) issue, which occurs when a server fails to properly validate requests. This allows an authorized attacker to perform spoofing over a network. Additionally, incorrect input neutralization during the generation of web pages may lead to cross-site scripting (XSS), a technique where malicious scripts are injected into trusted websites, further enabling identity spoofing. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Dynamics 365 (affected versions not specified) **Description** The issue is related to insufficient protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to inject arbitrary code into a user-loaded web page. This could lead to unauthorized access to protected information, phishing attacks, and modification of the web page's appearance using specially crafted HTTP requests. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.