CVE-2023-36433

CVE-2023-36433 affects Microsoft Dynamics 365 (on-premises) 9.0 and 9.1 with an information-disclosure vulnerability. Root cause details are not fully specified in the provided documents, but the impact is access to sensitive data. CVSSv3.1 metrics: Network attack, low complexity, user interactio...

CVE-2023-36433 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

Service Update 0.47 for Microsoft Dynamics 365 9.0

None None...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

Microsoft Dynamics 365 跨站脚本漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. Microsoft Dynamics 365 on-premises cross-site scripting vulnerability can be...

Microsoft Dynamics 365 安全漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. An information disclosure vulnerability exists in Microsoft Dynamics 365...

PT-2023-5978 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to conduct cross-site scripting...

PT-2023-5976 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to insufficient protection of service data in Microsoft Dynamics 365, which can allow a remote attacker to gain unauthorized access to...

Microsoft Dynamics 365 安全漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. An information disclosure vulnerability exists in Microsoft Dynamics 365...

Trend Micro Endpoint security products for enterprises vulnerable to arbitrary code execution

Overview Trend Micro Endpoint security products for enterprises provided by Trend Micro Incorporated contain an arbitrary code execution vulnerability CWE-94, CVE-2023-41179 in 3rd Party AV Uninstaller Module. Trend Micro Incorporated states that an attack exploiting this vulnerability has been...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 4

Package name: xms10.15.0.10417.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10327.bin, xms10.15.0.10220.bin and xms10.15.0.10125.bin Date: September 2023 Languages supported: English US Important notes about this update As a best practice, Citrix...

Security Updates for Microsoft Dynamics 365 (on-premises) (September 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple Cross-site Scripting vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

CVE-2023-38164

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-36886

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-36886

CVE-2023-36886 applies to Microsoft Dynamics 365 (on-premises) and is a cross-site scripting vulnerability in the on-premises deployment. Connected sources corroborate this as the same CVE and identify affected Dynamics 365 on-premises products. Microsoft published fixes via Service Update 1.21 f...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Microsoft Dynamics 365 跨站脚本漏洞

Microsoft Dynamics 365 on-premises is a set of intelligent business applications from Microsoft Corporation USA that help you run your overall business and achieve better results through predictive AI-driven insights. A cross-site scripting vulnerability exists in Microsoft Dynamics 365...

PT-2023-5142 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to conduct cross-site scripting...