Microsoft Dynamics 365 Server, version 9.0 (on-premises)

• CVE-2020-1050 Unrated A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 1.8%
• CVE-2020-1049 Unrated A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 1.5%