3635 matches found
PT-2023-3940 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to conduct a cross-site scripting XS...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft has fixed vulnerabilities in Dynamics 365 on prem. A malicious party could exploit the vulnerabilities to launch a Cross-site scripting attack. Such an attack can lead to execution of arbitrary code in the context of the victim's browser, or access to sensitive data in the context of th...
CVE-2023-3529
A vulnerability classified as problematic has been found in Rotem Dynamics Rotem CRM up to 20230729. This affects an unknown part of the file /LandingPages/api/otp/send?id=IDampersandmethod=sms of the component OTP URI Interface. The manipulation leads to information exposure through discrepancy...
Design/Logic Flaw
A vulnerability classified as problematic has been found in Rotem Dynamics Rotem CRM up to 20230729. This affects an unknown part of the file /LandingPages/api/otp/send?id=IDampersandmethod=sms of the component OTP URI Interface. The manipulation leads to information exposure through discrepancy...
CVE-2023-3529
Rotem Dynamics Rotem CRM up to 20230729 contains an information-exposure issue in the OTP URI Interface, specifically the /LandingPages/api/otp/send?id=[ID]&method=sms endpoint. The vulnerability allows remote initiation and arises from a discrepancy in the handling of this API, with no public ex...
Rotem Dynamics Rotem CRM 安全漏洞
Rotem Dynamics Rotem CRM is a customer relationship management system from Rotem Dynamics. A security vulnerability exists in Rotem Dynamics Rotem CRM 20230729 and earlier versions, which stems from a problem with the file /LandingPages/api/otp/send?id=IDampersandmethod=sms, which can lead to...
PT-2023-25201 · Rotem Dynamics · Rotem Crm
Name of the Vulnerable Software and Affected Versions: Rotem Dynamics Rotem CRM up to 20230729 Description: A problematic vulnerability has been found in Rotem Dynamics Rotem CRM, affecting an unknown part of the file "/LandingPages/api/otp/send?id=ID&method=sms" of the component OTP URI Interfac...
The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software, related to errors in the user interface’s information presentation, allows attackers to perform spear-phishing attacks.
The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software is related to errors in information presentation by the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
Dynamics 365 Finance Spoofing Vulnerability
...
Microsoft Dynamics 365 安全漏洞
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics 365 that stems from the...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft has fixed vulnerabilities in Power Apps and Dynamics. An authenticated malicious person could exploit the vulnerabilities to impersonate another user and execute arbitrary code execute arbitrary code with privileges of that user. Microsoft Power Apps:...
PT-2023-3134 · Microsoft · Dynamics 365 Finance
Name of the Vulnerable Software and Affected Versions: Dynamics 365 Finance affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Dynamics 365 for Finance and Operations. This can allow a remote attacker...
KLA50320 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Power Apps can be exploited remotely to spoof user interface. 2. A spoofing...
The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by using specially crafted requests...
The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Microsoft Dynamics 365 Customer Voice application’s feedback management application lies in the insufficient protection of its web page structure, allowing attackers to execute cross-site scripting attacks.
The vulnerability of the customer feedback management application of Microsoft Dynamics 365 is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
Security Updates for Microsoft Dynamics 365 (on-premises) (April 2023)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple session spoofing vulnerabilities. An attacker can exploit these to perform actions with the privileges of another user. Note that Nessus has not tested for these issues but has instead relie...
CVE-2023-28313
Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability...