CVE-2019-1229

An elevation of privilege vulnerability exists in Dynamics On-Premise v9. An attacker who successfully exploited the vulnerability could leverage a customizer privilege within Dynamics to gain control of the Web Role hosting the Dynamics installation. To exploit this vulnerability, an attacker...

CVE-2019-1229

CVE-2019-1229 affects Microsoft Dynamics 365 On-Premises (Dynamics On-Premise) v9. An elevation-of-privilege vulnerability exists allowing a user with permission to author customized business rules to persist XAML scripts that could be interpreted as code, enabling the attacker to gain control of...

Dynamics on-premises elevation of privilege vulnerability: August 13, 2019

Dynamics on-premises elevation of privilege vulnerability: August 13, 2019 Introduction Service Update 0.7 for Microsoft Dynamics CRM on-premises 9.0 is now available. This article describes the hotfixes and updates that are included in Service Update 0.7. Summary An elevation of privilege...

KLA11532 A PE vulnerability in Microsoft Dynamics 365 On-Premise v9

An elevation of privilege vulnerability in Dynamics On-Premise can be exploited remotely via specially crafted XAML script to gain privileges. Original advisories CVE-2019-1229 Related products Microsoft-Dynamics-365 CVE list CVE-2019-1229 high KB list 4508724 Solution Install necessary updates...

Microsoft Dynamics On-Premise CVE-2019-1229 Remote Privilege Escalation Vulnerability

Description Microsoft Dynamics is prone to a a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Dynamics 365 on-premises 9 Recommendations Block external access at the network boundary, unless external parti...