CVE-2026-47646

Summary

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker to perform spoofing over a network.

Affected Software

VendorProductVersion RangeStatus
MicrosoftDynamics 365 Customer Voice-affected

Weaknesses

  • CWE-79: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References