Microsoft · Dynamics 365 For Finance/Operations · CVE-2020-17158
**Name of the Vulnerable Software and Affected Versions**
Microsoft Dynamics 365 for Finance and Operations (on-premises) (affected versions not specified)
Microsoft Visual Studio Code Java Extension (affected versions not specified)
**Description**
The issue concerns a remote code execution vulnerability and a flaw in the Microsoft Visual Studio Code Java Extension related to incorrect code generation management. Exploitation of the vulnerability may allow a remote attacker to execute arbitrary code.
**Recommendations**
For Microsoft Dynamics 365 for Finance and Operations (on-premises), at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Microsoft Visual Studio Code Java Extension, at the moment, there is no information about a newer version that contains a fix for this vulnerability.