6817 matches found
The vulnerability of the Microsoft Dynamics 365 Customer Voice application’s feedback management application lies in the insufficient protection of its web page structure, allowing attackers to execute cross-site scripting attacks.
The vulnerability of the customer feedback management application of Microsoft Dynamics 365 is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
AIX is vulnerable to an SSL server spoof due to Apache Commons HttpClient
IBM SECURITY ADVISORY First Issued: Thu Apr 13 13:44:57 CDT 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/commonshttpadvisory.asc Security Bulletin: AIX is vulnerable to an SSL server spoof due to Apache Commons HttpClient...
Congratulations to the Top MSRC 2023 Q1 Security Researchers!
Congratulations to all the researchers recognized in this quarter’s Microsoft Researcher Recognition Program leaderboard! Thank you to everyone for your hard work and continued partnership to secure customers. The top three researchers of the 2023 Q1 Security Researcher Leaderboard are: Kai Lu...
New Imperva Office & Customer Experience Centre Aims to Meet the Needs of Customers In Singapore & Across Asia Pacific and Japan
Since 2009, Imperva has proudly maintained offices in various countries across the Asia Pacific and Japan APJ region. As the company experiences momentum in this region, we continue to invest in expanding our presence to better support our valued customers, wherever they’re located in APJ. This...
CVE-2023-28313
Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability...
CVE-2023-28313
Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability...
Cross site scripting
Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability...
CVE-2023-28313 Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability
...
CVE-2023-28313
The CVE-2023-28313 entry covers a Cross-Site Scripting (XSS) vulnerability in Microsoft Dynamics 365 Customer Voice. Affected product: Microsoft Dynamics 365 Customer Voice (part of Dynamics suite). Description and connected records indicate an XSS flaw that can interfere with the web UI, enablin...
Security Bulletin: CVE-2022-21426 may affect IBM® SDK, Java™ Technology Edition
Summary CVE-2022-21426 was disclosed as part of the Oracle April 2022 Critical Patch Update. Vulnerability Details CVEID:CVE-2022-21426 DESCRIPTION: An unspecified vulnerability in Java SE related to the JAXP component could allow an unauthenticated attacker to cause a denial of service resulting...
Rapid7 Podcast Explores Hybrid-First Workplace Learnings
As the world continues to navigate the post-pandemic shift in work environments, Rapid7 is operating on a hybrid-first approach that balances flexibility and productivity with collaboration and optimizing for customer success. In the spirit of cross-collaboration, the People Development and...
Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability
...
Microsoft Dynamics 跨站脚本漏洞
Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics 365 Customer Voice. No informati...
PT-2023-2317 · Microsoft · Dynamics 365 Customer Voice
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 Customer Voice affected versions not specified Description: The issue is related to insufficient protection of the web page structure, allowing for cross-site scripting attacks. An attacker can exploit this to perform...
SAP CRM 安全漏洞
SAP CRM is a customer relationship management system from SAP, Germany. A security vulnerability exists in SAP CRM WebClient UI that originates from a vulnerability that allows an attacker to modify the HTTP verbs used in a request via a web server, which could lead to the exposure of form fields...
SAP CRM 代码注入漏洞
SAP CRM is a customer relationship management system from SAP, a German company. A code injection vulnerability exists in SAP CRM versions 700, 701, 702, 712, and 713. An attacker could exploit this vulnerability to compromise the confidentiality and integrity of data and availability...
CVE-2023-26260
OXID eShop 6.2.x before 6.4.4 and 6.5.x before 6.5.2 allows session hijacking, leading to partial access of a customer's account by an attacker, due to an improper check of the user agent...
IBM TRIRIGA Application Platform Cross-Site Scripting Vulnerability (CNVD-2024-01175)
The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from International Business Machines IBM. The platform provides a set of design-time and run-time components for building and running its enterprise-class applications, respectively, and...
CVE-2023-26260
OXID eShop vulnerability CVE-2023-26260 affects versions 6.2.x prior to 6.4.4 and 6.5.x prior to 6.5.2. The issue arises from an improper check of the user agent, enabling session hijacking that can grant an attacker partial access to a customer’s account. The CVSS v3.1 base score is 5.4 (Medium)...