3093 matches found
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
Microsoft Dynamics 365 (on-premises) Update 2.24
None None...
Service Update 0.22 for Microsoft Dynamics 365 9.0
None None...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
PT-2020-4769 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365, which can be exploited by a remote attacker to perform a...
PT-2020-4759 · Microsoft · Office +2
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to the improper handling of objects in memory...
PT-2020-4708 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to conduct cross-site scripting XSS...
PT-2020-4803 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to the failure to protect the web page structure in Microsoft Dynamics 365, allowing for potential cross-site scripting attacks. An attacker...
PT-2020-4760 · Microsoft · 365 Apps For Enterprise +2
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to the improper handling of objects in memory...
How to Create a Secure IAM Policy for Connection to S3 Object Storage
Purpose This article documents how to create a secure IAM policy to connect to the S3 bucket used as an object storage repository in Veeam Backup for Microsoft 365 for storing backup data. Solution The following permissions will allow Veeam Backup for Microsoft 365 to access the S3 bucket to save...
PT-2020-4802 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365, which can be exploited for cross-site scripting attacks. This...
Security Updates for Microsoft Dynamics 365 (on-premises) (November 2020)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities. An authenticated, remote attacker could exploit this, by sending a specially crafted request to an affected Dynamics server. The attacker who...
It’s Cybersecurity Awareness Month and there is still a lot to do
October is National Cyber Security Awareness Month NCSAM. And there is still a lot to do! For the last 17 years, the National Cybersecurity Awareness Month NCSAM campaign, driven by the Department of Homeland Security, has raised awareness about the importance of cyber security across the Nation...
It’s Cybersecurity Awareness Month and there is still a lot to do
October is National Cyber Security Awareness Month NCSAM. And there is still a lot to do! For the last 17 years, the National Cybersecurity Awareness Month NCSAM campaign, driven by the Department of Homeland Security, has raised awareness about the importance of cyber security across the Nation...
The vulnerability of the Microsoft Dynamics 365 Commerce e-commerce software, related to authentication errors, allows a hacker to increase their privileges.
The vulnerability of the Microsoft Dynamics 365 Commerce e-commerce software relates to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
The vulnerability of the Dynamics server software for resource planning in Microsoft Dynamics 365 allows a perpetrator to carry out a cross-site scripting attack.
The vulnerability of the Dynamics resource planning software for Microsoft Dynamics 365 relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Dynamics server software for resource planning in Microsoft Dynamics 365 allows a perpetrator to carry out a cross-site scripting attack.
The vulnerability of the Dynamics resource planning software for Microsoft Dynamics 365 relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
Majority of Microsoft 365 Admins Don't Enable MFA
Up to 78 percent of Microsoft 365 administrators do not have multi-factor authentication MFA security measures enabled. A recent report by CoreView Research also found that 97 percent of all total Microsoft 365 users do not use MFA, shedding a grim light on the security issues inherent with the...
Microsoft Dynamics 365 Commerce Elevation of Privilege Vulnerability
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. Microsoft Dynamics 365 Commerce has a security vulnerability that can be exploited...
Microsoft Teams Phishing Attack Targets Office 365 Users
Researchers are warning of a phishing campaign that pretends to be an automated message from Microsoft Teams. In reality, the attack aims to steal Office 365 recipients’ login credentials. Teams is Microsoft’s popular collaboration tool, which has particularly risen in popularity among remote...