CVE-2020-16943

6.5 mediumEPSS 1.1%

Medium (6.5) in microsoft dynamics 365. EPSS 1.1% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who successfully exploited this vulnerability could update data without proper authorization. To exploit the vulnerability, an attacker would need to send a specially crafted request to an affected server. The security update addresses the vulnerability by correcting how Microsoft Dynamics 365 Commerce performs authorization checks.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
Published: 2020-10-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:dynamics_365

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16943
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16943

Check your stack JSON