1634 matches found
CVE-2026-122196
Improper restriction of xml external entity reference in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...
EUVD-2026-122127
Improper restriction of xml external entity reference in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...
CVE-2026-122196
An improper restriction of XML External Entity (XXE) references in Microsoft Dynamics 365 (on-premises) enables an authorized attacker to disclose information over a network. The vulnerability is associated with CWE-611 . Remediation is available via an official fix from Microsoft.
Microsoft Dynamics 365 (on-premises) Information Disclosure Vulnerability
Improper restriction of xml external entity reference in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...
PT-2026-144040
🚨 CVE-2026-122196 Improper restriction of xml external entity reference in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network. 🎖@cveNotify...
CVE-2026-122196: Microsoft Microsoft Power Apps: Improper restriction of xml external entity reference in Microsoft Dynamics 365 (on-premises) allows an authorized…
Improper restriction of xml external entity reference in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...
Security Updates for Microsoft Dynamics NAV 2018 (Oct 2026)
The Microsoft Dynamics NAV 2018 install is missing a security update. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data allows an authorized attacker to execute code over a network. CVE-2026-100214 - Improper limitation of a pathname to a restricted...
Security Updates for Microsoft Dynamics NAV 2017 (Oct 2026)
The Microsoft Dynamics NAV 2017 install is missing a security update. It is, therefore, affected by a vulnerability: - Deserialization of untrusted data allows an authorized attacker to execute code over a network. CVE-2026-100214 Note that Nessus has not attempted to exploit this issue but has...
Microsoft Dynamics NAV Auth Bypass Info Disclosure
The vulnerability of the integrated business management system Microsoft Dynamics NAV lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
Microsoft Dynamics NAV Privilege Escalation
The vulnerability of the integrated Microsoft Dynamics NAV enterprise management system is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
Vulnerabilities in Microsoft Dynamics
Microsoft has addressed vulnerabilities in various Dynamics components. A malicious individual could exploit these vulnerabilities to execute attacks that can cause damage, as listed in the following tables: Microsoft Dataverse: | CVE-ID | CVSS | Impact | |--------|------|---------| |...
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network...
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
External control of file name or path in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...
KLA91339 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerabilit...
PT-2026-118112
Уязвимость интегрированной системы управления предприятием Microsoft Dynamics NAV связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...
PT-2026-118114
Уязвимость интегрированной системы управления предприятием Microsoft Dynamics NAV связана с отсутствием аутентификации для критичной функции. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть защищаемую информацию...
Microsoft Dynamics 365 Customer Engagement Code Execution
The vulnerability of the Microsoft Dynamics 365 Customer Engagement CE CRM system is related to improper code generation. Exploitation of this vulnerability could allow an attacker operating remotely to execute arbitrary code...
KLA91294 PE vulnerability in Microsoft Dynamics
Privilege escalation vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-77903 Exploitation CVE list CVE-2026-77903 unknown Solution Install necessary updates from the KB section, that are listed in your...
Microsoft Dynamics 365 (on-premises) (September 2026)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. CVE-2026-65772 Note that Nessus has not tested fo...
Microsoft Dynamics 365 (on-premises) (September 2026)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. CVE-2026-77908 Note that...