Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-74591
HistoryApr 15, 2022 - 12:00 a.m.

Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability

2022-04-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
13

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

Microsoft Dynamics is a suite of ERP business solutions for multinational companies from Microsoft Corporation (USA). A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises), which includes financial management, production management, and business intelligence management. The vulnerability stems from a failure of the network system or product to properly filter specific elements of code segments during external input data construction. An attacker could use this vulnerability to execute arbitrary code on the system.

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C