KLA11351 Multiple vulnerabilities in Microsoft Dynamics

🗓️ 13 Nov 2018 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 423 Views

Multiple vulnerabilities in Microsoft Dynamics. Malicious users can exploit these to spoof user interface and execute arbitrary code

Reporter	Title	Published	Views	Family All 60
ATTACKERKB	CVE-2018-8609	14 Nov 201801:29	–	attackerkb
ATTACKERKB	CVE-2018-8605	14 Nov 201801:29	–	attackerkb
ATTACKERKB	CVE-2018-8607	14 Nov 201801:29	–	attackerkb
ATTACKERKB	CVE-2018-8606	14 Nov 201801:29	–	attackerkb
ATTACKERKB	CVE-2018-8608	14 Nov 201801:29	–	attackerkb
BDU FSTEC	The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the SQL query structure, allowing an attacker to execute arbitrary code.	4 Dec 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows a hacker to inject arbitrary code into the web pages that users are asked to download.	4 Dec 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, allowing a hacker to inject arbitrary code into the web pages that users are allowed to download.	4 Dec 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, allowing a hacker to inject arbitrary code into the web pages that users are allowed to download.	4 Dec 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, allowing a hacker to inject arbitrary code into the web pages that users are allowed to download.	4 Dec 201800:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8605
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8606
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8607
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8609
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8608
threats	www.threats.kaspersky.com/en/product/Microsoft-Dynamics-365/
support	www.support.microsoft.com/kb/4467675
statistics	www.statistics.securelist.com/

22 Jan 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 26.5

CVSS 38.8

EPSS0.08719