On-Premises Servers Products are Here! Introducing the Applications and On-Premises Servers Bug Bounty Program

Microsoft is excited to announce the addition of Exchange on-premises, SharePoint on-premises, and Skype for Business on-premises to the Applications and On-Premises Servers Bounty Program. Through this expanded program, we encourage researchers to discover and report high-impact security...

On-Premises Servers Products are Here! Introducing the Applications and On-Premises Servers Bug Bounty Program

Microsoft is excited to announce the addition of Exchange on-premises, SharePoint on-premises, and Skype for Business on-premises to the Applications and On-Premises Servers Bounty Program. Through this expanded program, we encourage researchers to discover and report high-impact security...

Security Bulletin: Security vulnerability in WebSphere Application Server shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-23450)

Summary IBM WebSphere Application Server is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. IBM WebSphere Application Server is vulnerable to remote code execution due to Dojo CVE-2021-23450. Vulnerability Details Refer to the security bulletin...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 5

Package name: xms10.14.0.10521.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin Date: March 2022 Languages supported: English US Important notes about this update As a best...

Security Bulletin: Multiple security vulnerabilities may affect IBM DB2 shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-38931,CVE-2021-20373)

Summary IBM DB2 is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. Information about security vulnerabilities affecting DB2 has been published in multiple security bulletins as below. The recommended solution is to upgrade to Fix Pack version...

Security Bulletin: Security vulnerability in WebSphere Application Server shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-20517)

Summary IBM WebSphere Application Server ND shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises is vulnerable to a Directory Traversal vulnerability. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

Security Bulletin: Security vulnerability in WebSphere Application Server shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-29736)

Summary IBM WebSphere Application Server is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. WebSphere Application Server is vulnerable to a Privilege Escalation vulnerability. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises

Summary There are multiple vulnerabilities in the IBM HTTP Server used by WebSphere Application Server shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. This has been addressed. The recommended solution is to manually upgrade to the Interim Fix...

Security Bulletin: Multiple vulnerabilities in the Apache Commons Compress library used by WebSphere Application Server Liberty shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises

Summary There are multiple vulnerabilities in the Apache Commons Compress library that is used by WebSphere Application Server Liberty shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. This has been addressed. The recommended solution is to manually...

Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability

Microsoft Dynamics is a suite of ERP business solutions for multinational companies from Microsoft Corporation. Microsoft Dynamics 365 on-premises has a remote code execution vulnerability, for which no details are available...

CVE-2022-21957

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

CVE-2022-21957

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

CVE-2022-21957

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

Remote code execution

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

CVE-2022-21957 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

...

CVE-2022-21957

CVE-2022-21957 affects Microsoft Dynamics 365 (on-premises) / Dynamics CRM on-premises. The provided sources confirm a remote code execution vulnerability in Microsoft Dynamics 365 On-Premises, with CVSS3.1 base score 7.2 (HIGH) and CVSS2 base score 6.5 (MEDIUM). Concrete technical details (affec...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

...

Microsoft Dynamics 代码注入漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational companies from Microsoft Corporation. Microsoft Dynamics 365 on-premises has a remote code execution vulnerability, for which no details are available...

PT-2022-1703 · Microsoft · Dynamics 365 On-Premises

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Dynamics 365, allowing a remote attacker to execute arbitrary code using a specially...

Security Bulletin: A Security Vulnerability Has Been Identified In IBM Security Verify Privilege Vault

Summary A Security Vulnerability in IBM Security Verify Privilege Vault previously known as IBM Security Secret Server have been addressed in the release 11.1.000007. Vulnerability Details The 11.1.000007 update resolves a security vulnerability that was discovered during third-party penetration...