KLA11637 XSS vulnerability in Microsoft Dynamics

A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2020-0656 Exploitation Related products Microsoft-Dynamics-365 CVE list CVE-2020-0656 warning KB list Solution Install necessar...

Microsoft Dynamics 365 CVE-2020-0656 Cross Site Scripting Vulnerability

Description Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

PT-2020-1474

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Field Service versions 12.1.1 through 12.1.3 Oracle E-Business Suite Oracle Field Service versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle Field Service...

The vulnerability of the Wireless sub-component of the Oracle Field Service component in the Oracle E-Business Suite automation system for enterprise operations allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Wireless component of the Oracle Field Service system, a part of the Oracle E-Business Suite, relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly...

Oracle E-Business Suite Multiple Vulnerabilities (Oct 2019 CPU)

The version of Oracle E-Business installed on the remote host is missing the October 2019 Oracle Critical Patch Update CPU. It is, as noted in the October 2019 Critical Patch Update advisory, affected by flaws in the following components : - Oracle Advanced Outbound Telephony - Oracle Application...

CVE-2019-2930

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Wireless. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Field...

Design/Logic Flaw

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Wireless. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Field...

CVE-2019-2930

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Wireless. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Field...

CVE-2019-2930

CVE-2019-2930 affects Oracle E-Business Suite Field Service Wireless component. Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.8. An unauthenticated attacker with network access over HTTP can compromise Oracle Field Service; exploitation requires human interaction. Impact can include unauthoriz...

CVE-2019-2930: Undefined Security Weakness

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Wireless. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Field...

Oracle E-Business Suite Field Service Wireless Component Authorization Issue Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. field Service formerly known as...

PT-2019-3718

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite component: Wireless versions 12.1.1 through 12.1.3 Oracle E-Business Suite component: Wireless versions 12.2.3 through 12.2.8 Description The issue is related to a vulnerability in the authentication procedure of the...

CVE-2019-2828

Vulnerability in the Oracle Field Service component of Oracle E-Business Suite subcomponent: Wireless. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2828

Vulnerability in the Oracle Field Service component of Oracle E-Business Suite subcomponent: Wireless. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Design/Logic Flaw

Vulnerability in the Oracle Field Service component of Oracle E-Business Suite subcomponent: Wireless. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2828

Vulnerability in the Oracle Field Service component of Oracle E-Business Suite subcomponent: Wireless. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2828

Vulnerability in the Oracle Field Service component of Oracle E-Business Suite subcomponent: Wireless. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2828

CVE-2019-2828 affects Oracle E-Business Suite Field Service Wireless subcomponent. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.8. The vulnerability allows unauthenticated attackers with network access via HTTP to compromise Oracle Field Service, with successful attacks requiring user inte...

CVE-2019-2828: Undefined Security Weakness

Vulnerability in the Oracle Field Service component of Oracle E-Business Suite subcomponent: Wireless. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2019-16523

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite subcomponent: Wireless versions 12.1.1 through 12.1.3 Oracle E-Business Suite subcomponent: Wireless versions 12.2.3 through 12.2.8 Description The issue allows an unauthenticated attacker with network access via HTTP t...