3635 matches found
PT-2023-5002 · Microsoft · Dynamics 365 For Finance/Operations
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 for Finance and Operations affected versions not specified Description: The issue is related to insufficient protection of the web page structure, which can allow a remote attacker to perform cross-site scripting attack...
KLA60564 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premises can be exploited remotely to spoof user...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft has fixed vulnerabilities in Dynamics and Dynamics Finance & Operations. A malicious person could exploit them to launch a Cross-Site Scripting attack. Such an attack can lead to execution of arbitrary code in the victim's browser, or access to sensitive data in the context of the...
Security Updates for Microsoft Dynamics 365 Business Central (August 2023)
The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an escalation of privilege vulnerability. This vulnerability requires that the attacker already has high privileges to a security group on the tenet. Note that Nessus has not attempted ...
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses allows a hacker to increase their privileges.
The vulnerability of the Microsoft Dynamics 365 Business Centra software for small and medium-sized businesses is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Microsoft Dynamics Business Central Elevation of Privilege Vulnerability
Microsoft Dynamics Business Central is an enterprise resource planning system from Microsoft. The system includes features such as financial management, project management and supply chain management. An elevation of privilege vulnerability exists in Microsoft Dynamics Business Central, which can...
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A remote code execution vulnerability exists in Microsoft Dynamics 365 On-Premises...
CVE-2023-38167
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability...
CVE-2023-38167
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability...
CVE-2023-35389
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...
CVE-2023-35389
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Dynamics Business Central Elevation Of Privilege Vulnerability...
Remote code execution
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...
CVE-2023-38167 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
...
CVE-2023-38167
CVE-2023-38167 is an elevation-of-privilege vulnerability affecting Microsoft Dynamics 365 Business Central (2023 Release Wave 1) as documented by multiple sources. The issue is reported as enabling an attacker with high privileges to obtain elevated rights (impact: high; CVSS 3.1: AV:N/AC:L/PR:H...
CVE-2023-38167 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
...
CVE-2023-35389 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
...
CVE-2023-35389 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
...
CVE-2023-35389
CVE-2023-35389 affects Microsoft Dynamics 365 On-Premises (on-premises) with a remote code execution vulnerability. Multiple connected sources confirm this is an On-Premises issue impacting Dynamics 365 on version 9.x, including Business Central/On-Prem deployments, and describe exploit pathways ...
