CVE-2018-8654

CVE-2018-8654 is an elevation-of-privilege flaw in Microsoft Dynamics 365 Server (on-premises). An authenticated attacker can impersonate another Dynamics CRM user by sending a specially crafted request, abusing input validation/sanitization weaknesses. Microsoft released a fix in Update 8.2.3 (K...

CVE-2018-8654

An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Server, aka 'Microsoft Dynamics 365 Elevation of Privilege Vulnerability'...

The vulnerability of Microsoft Office and Office 365 programs, related to errors in memory object handling, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Office and Office 365 programs is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, relates to errors in memory object handling. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Microsoft Office 365 software, related to errors in memory object handling, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office 365 software package is related to errors in memory object handling. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Release notes for Veeam Backup for Microsoft 365 4a

Challenge Release Notes for Veeam Backup for Microsoft 365 4a. Cause Please confirm you are running Veeam Backup for Microsoft 365 version 2.0, 3.0 or 4.0 prior to installing the new version 4a 4.0.0.1553. You can check the product version under Help About in the Veeam Backup for Microsoft 365...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jan 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2020-0656

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...

CVE-2020-0656

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...

Cross site scripting

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...

CVE-2020-0656

CVE-2020-0656 describes a cross-site scripting vulnerability in Microsoft Dynamics 365 on-premises (notably Dynamics 365 Field Service on-premises v7 series) caused by improper sanitization of specially crafted web requests. An authenticated attacker could exploit this to perform XSS in the user’...

CVE-2020-0656

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

Microsoft Excel CVE-2020-0651 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...

Microsoft Dynamics 365 CVE-2020-0656 Cross Site Scripting Vulnerability

Description Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

KLA11637 XSS vulnerability in Microsoft Dynamics

A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2020-0656 Related products Microsoft-Dynamics-365 CVE list CVE-2020-0656 warning KB list Solution Install necessary updates fro...

PT-2020-1325

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 on-premises affected versions not specified Description A cross-site scripting issue exists due to improper sanitization of specially crafted web requests to the affected Dynamics server. This could allow a remote attack...

Microsoft Excel CVE-2020-0653 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...

Microsoft 365 helps governments adopt a Zero Trust security model

For governments to function, the flow of data on a massive scale is required—including sensitive information about critical infrastructure, citizens, and public safety and security. The security of government information systems is subject to constant attempted attacks and in need of a modern...

Tricky Phish Angles for Persistence, Not Passwords

Late last year saw the re-emergence of a nasty phishing tactic that allows the attacker to gain full access to a user's data stored in the cloud without actually stealing the account password. The phishing lure starts with a link that leads to the real login page for a cloud email and/or file...