Microsoft Dynamics 365 Elevation of Privilege Vulnerability

Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network...

KLA71258 PE vulnerability in Microsoft Dynamics

An elevation of privilege was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-38182 Related products Microsoft-Dynamics-365 CVE list CVE-2024-38182 critical Solution Install necessary updates from the KB section, that ar...

Microsoft Dynamics 365 安全漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. It is used for financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics 365 that stems from the presence o...

OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script

Cybersecurity researchers are warning about a new phishing campaign that targets Microsoft OneDrive users with the aim of executing a malicious PowerShell script. "This campaign heavily relies on social engineering tactics to deceive users into executing a PowerShell script, thereby compromising...

Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails

An unknown threat actor has been linked to a massive scam campaign that exploited an email routing misconfiguration in email security vendor Proofpoint's defenses to send millions of messages spoofing various popular companies like Best Buy, IBM, Nike, and Walt Disney, among others. "These emails...

The vulnerability of the on-premise resource planning software of Microsoft Dynamics 365, related to incorrect authorization, allows a perpetrator to disclose protected information.

The vulnerability of the on-premise resource planning software for Microsoft Dynamics 365 is related to improper authorization. Exploitation of this vulnerability can allow an attacker, operating remotely, to disclose sensitive information...

CVE-2024-38436

Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-38436

Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-38436 Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-38436

CVE-2024-38436 concerns Commugen SOX 365 with a Cross-site Scripting (CWE-79) vulnerability due to improper neutralization of user input during web page generation. Affected software is Commugen SOX 365; exact vulnerable components/files and specific affected versions are not provided in the conn...

CVE-2024-38436 Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Commugen SOX 365 – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

PT-2024-28002 · Commugen · Commugen Sox 365

Name of the Vulnerable Software and Affected Versions: Commugen SOX 365 affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. Recommendations: At the moment, there is no information...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jul 2024)

This host is missing a critical security update according to Microsoft Office Click-to-Run update July 2024. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2024-30061

Microsoft Dynamics 365 On-Premises Information Disclosure Vulnerability...

CVE-2024-30061

Microsoft Dynamics 365 On-Premises Information Disclosure Vulnerability...

CVE-2024-30061 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2024-30061 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2024-30061

CVE-2024-30061 — Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability. The vulnerability affects the on‑premises Dynamics 365 product and is classified with a CVSSv3.1 base score of 7.3 (HIGH): Network access, low attack complexity, required user interaction, and low privileg...

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

PT-2024-4972 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to improper authorization in the local software tool for resource planning in Microsoft Dynamics 365 On-Premises. Exploitation of this issue...