The latest version of Dynamics 3658 on-premise uses an older version of JQuery with known security vulnerabilities (including XSS-problems, see https://github.com/jquery/jquery/issues/2432).

JQuery version 3.0.0 or newer should be used instead to mitigate the security risk.