265 matches found
CVE-2020-1018
CVE-2020-1018 concerns Microsoft Dynamics 365 Business Central/NAV on-premises where masked fields shown on a chart page are not properly hidden, exposing information that should be concealed. The info-disclosure vulnerability stems from the rendering of masked content in the Windows client; the ...
CVE-2020-1018
An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a mask...
Cumulative Update 41 for Microsoft Dynamics NAV 2017 (Build 30219)
Cumulative Update 41 for Microsoft Dynamics NAV 2017 Build 30219 This article applies to Microsoft Dynamics NAV 2017 for all countries and all language locales. An information disclosure vulnerability exists if Microsoft Dynamics Business Central/NAV on-premises does not correctly hide the value ...
Cumulative Update 54 for Microsoft Dynamics NAV 2016 (Build 51811)
Cumulative Update 54 for Microsoft Dynamics NAV 2016 Build 51811 This article applies to Microsoft Dynamics NAV 2016 for all countries and all language locales. An information disclosure vulnerability exists if Microsoft Dynamics Business Central/NAV on-premises does not correctly hide the value ...
Description of the security update for Microsoft Dynamics NAV 2015: April 14, 2020
Description of the security update for Microsoft Dynamics NAV 2015: April 14, 2020 An information disclosure vulnerability exists if Microsoft Dynamics Business Central/NAV on-premises does not correctly hide the value of a masked field when it displays the records as a chart page. To learn more...
Description of the security update for Microsoft Dynamics NAV 2013 R2: April 14, 2020
Description of the security update for Microsoft Dynamics NAV 2013 R2: April 14, 2020 This update addresses a vulnerability that is related to the NAVRecordState state. To learn more about the vulnerability, go to CVE-2020-1022. How to obtain and install the update Microsoft Download Center The...
Cumulative Update 28 for Microsoft Dynamics NAV 2018 (Build 41920)
Cumulative Update 28 for Microsoft Dynamics NAV 2018 Build 41920 This article applies to Microsoft Dynamics NAV 2018 for all countries and all language locales. An information disclosure vulnerability exists if Microsoft Dynamics Business Central/NAV on-premises does not correctly hide the value ...
Microsoft Dynamics Business Central/NAV Information Disclosure
An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page. The attacker who successfully exploited the vulnerability could see the information that are in a...
Cumulative Update 40 for Microsoft Dynamics NAV 2017 (Build 30192)
Cumulative Update 40 for Microsoft Dynamics NAV 2017 Build 30192 This article applies to Microsoft Dynamics NAV 2017 for all countries and all language locales.A remote code execution vulnerability exists in Microsoft Dynamics NAV. A user who has the permission to access certain features that...
Description of the security update for Microsoft Dynamics NAV 2015: March 10, 2020
None None...
Cumulative Update 53 for Microsoft Dynamics NAV 2016 (Build 51775)
Cumulative Update 53 for Microsoft Dynamics NAV 2016 Build 51775 This article applies to Microsoft Dynamics NAV 2016 for all countries and all language locales.A remote code execution vulnerability exists in Microsoft Dynamics NAV. A user who has the permission to access certain features that...
Cumulative Update 27 for Microsoft Dynamics NAV 2018 (Build 41203)
Cumulative Update 27 for Microsoft Dynamics NAV 2018 Build 41203 This article applies to Microsoft Dynamics NAV 2018 for all countries and all language locales.A remote code execution vulnerability exists in Microsoft Dynamics NAV. A user who has the permission to access certain features that...
Cumulative Update 10 for Microsoft Dynamics 365 Business Central April'19 on-premises (Application Build 14.11.41204, Platform Build 14.0.41143)
None None...
Description of the security update for Microsoft Dynamics NAV 2013 R2: March 10, 2020
Description of the security update for Microsoft Dynamics NAV 2013 R2: March 10, 2020 A remote code execution vulnerability exists in Microsoft Dynamics NAV 2013 R2. A user who has the permission to access certain features that requires a call from the Role-Tailored Client that has the dataset...
The vulnerability of the Web Time and Expense interface of the integrated enterprise management system Microsoft Dynamics NAV allows a malicious individual to gain unauthorized access to arbitrary reports.
The vulnerability of the Web Time and Expense interface of the integrated enterprise management system Microsoft Dynamics NAV is related to the insecure direct object reference IDOR. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to arbitrar...
CVE-2019-19616
An Insecure Direct Object Reference IDOR vulnerability in the Xtivia Web Time and Expense WebTE interface used for Microsoft Dynamics NAV before 2017 allows an attacker to download arbitrary files by specifying arbitrary values for the recId and filename parameters of the /Home/GetAttachment...
CVE-2019-19616
An Insecure Direct Object Reference IDOR vulnerability in the Xtivia Web Time and Expense WebTE interface used for Microsoft Dynamics NAV before 2017 allows an attacker to download arbitrary files by specifying arbitrary values for the recId and filename parameters of the /Home/GetAttachment...
Design/Logic Flaw
An Insecure Direct Object Reference IDOR vulnerability in the Xtivia Web Time and Expense WebTE interface used for Microsoft Dynamics NAV before 2017 allows an attacker to download arbitrary files by specifying arbitrary values for the recId and filename parameters of the /Home/GetAttachment...
CVE-2019-19616
An Insecure Direct Object Reference IDOR vulnerability in the Xtivia Web Time and Expense WebTE interface used for Microsoft Dynamics NAV before 2017 allows an attacker to download arbitrary files by specifying arbitrary values for the recId and filename parameters of the /Home/GetAttachment...
Atlassian Jira Information Disclosure Vulnerability (CNVD-2019-29114)
Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in the /rest/issueNav/1/issueTable resource in Atlassian Jira versions prior to...