67 matches found
Security Updates for Microsoft Dynamics NAV (August 2021)
The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by a Cross-site Scripting Vulnerability. Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenabl...
Cumulative Update 56 for Microsoft Dynamics NAV 2017 (Build 30601)
None None...
Cumulative Update 43 for Microsoft Dynamics NAV 2018 (Build 47562)
None None...
Security Updates for Microsoft Dynamics NAV (Dec 2020)
The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by an information disclosure vulnerability in the Document Service table due to the Password field not being masked. An authenticated, remote attacker can exploit this, by inspecting as a system user, to...
Security Updates for Microsoft Dynamics NAV (Feb 2021)
The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by a cross site scripting XSS vulnerability due to improper validation of user-supplied input. An authenticated attacker can exploit this, by entering specially crafted URLs in the Links and Notes feature,...
XSS attack in Links and Notes feature in Microsoft Dynamics NAV (KB4602915)
None None...
Microsoft Dynamics Cross-Site Scripting Vulnerability
Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management, and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics. The following...
KLA12070 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft Dataverse can be exploited...
The vulnerability of the integrated enterprise management system of Microsoft Dynamics NAV, related to the lack of protection for operational data, allows a perpetrator to gain access to protected information.
The vulnerability of the integrated Microsoft Dynamics NAV enterprise management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...
CVE-2020-17133
CVE-2020-17133 is a Microsoft Dynamics Business Central/NAV information-disclosure vulnerability. The root cause is that the Password field in the Document Service table is not masked, which could allow an authenticated remote attacker (as a system user) to reveal passwords. Public references in ...
Password is not masked in the Document Service table in Microsoft Dynamics NAV 2015 and NAV 2013 R2
Password is not masked in the Document Service table in Microsoft Dynamics NAV 2015 and NAV 2013 R2 Symptoms In Microsoft Dynamics NAV 2015 and Microsoft Dynamics NAV 2013 R2, the Password field is not masked in the Document Service table. Therefore, the field is visible during inspection. To lea...
Microsoft Dynamics Business Central Information Disclosure Vulnerability
Microsoft Dynamics Business Central is an enterprise resource planning system from Microsoft. The system includes features such as financial management, project management, and supply chain management. An information disclosure vulnerability exists in Microsoft Dynamics Business Central. The...
The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV lies in the improper elimination of certain elements in the output data used by the incoming component, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV is related to incorrect elimination of special elements in the output data used by the incoming component. Exploitation of this vulnerability can allow...
The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access...
Security Updates for Microsoft Dynamics NAV (Dec 2018)
The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this, by sending a specially crafte...
Security Updates for Microsoft Dynamics NAV (Apr 2020)
The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists in Dynamics NAV due to the application not properly hiding the value of a masked field when showing the records as a char...
Security Updates for Microsoft Dynamics NAV (Mar 2020)
The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by a remote code execution vulnerability due to an issue with the Role-Tailored Client. An authenticated, remote attacker can exploit this to execute arbitrary commands or elevate privileges. Note that...
Microsoft Dynamics NAV Server Installed (Windows)
Binary data microsoftdynamicsnavserverwininstalled.nbin...
CVE-2020-1018
CVE-2020-1018 concerns Microsoft Dynamics 365 Business Central/NAV on-premises where masked fields shown on a chart page are not properly hidden, exposing information that should be concealed. The info-disclosure vulnerability stems from the rendering of masked content in the Windows client; the ...
Description of the security update for Microsoft Dynamics NAV 2015: April 14, 2020
Description of the security update for Microsoft Dynamics NAV 2015: April 14, 2020 An information disclosure vulnerability exists if Microsoft Dynamics Business Central/NAV on-premises does not correctly hide the value of a masked field when it displays the records as a chart page. To learn more...