3373 matches found
PT-2022-1676 · Microsoft · Dynamics Gp
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics GP affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Dynamics GP, which can lead to spoofing attacks. An attacker, acting...
PT-2022-1708 · Microsoft · Dynamics Gp
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics GP affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Dynamics GP, a software package for mid-size business accounting or enterprise resource planning. Exploitati...
Microsoft Dynamics 权限许可和访问控制问题漏洞
Microsoft Dynamics is a suite of ERP business solutions for multinational companies from Microsoft Corporation USA. The product includes financial management, production management and business intelligence management, etc. An elevation of privilege vulnerability exists in Microsoft Dynamics GP. ...
KLA12452 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Dynamics GP can be...
Microsoft Dynamics 权限许可和访问控制问题漏洞
Microsoft Dynamics is a set of ERP business solutions for multinational companies from the US company Microsoft Microsoft. The product includes financial management, production management and business intelligence management, etc. Microsoft Dynamics GP has an elevation of privilege vulnerability,...
Microsoft Dynamics 安全漏洞
Microsoft Dynamics is a suite of ERP business solutions for multinational companies from the United States-based Microsoft Corporation Microsoft. The product includes financial management, production management and business intelligence management, etc. Microsoft Dynamics GP has a spoofing...
PT-2022-1707 · Microsoft · Dynamics Gp
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics GP affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Dynamics GP, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At th...
PT-2022-1681 · Microsoft · Dynamics Gp
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics GP affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Dynamics GP, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At th...
Vulnerability fixed in Microsoft Dynamics
Microsoft has fixed a vulnerability in Microsoft Dynamics. The vulnerability allows an authenticated malicious person to to execute arbitrary code. To exploit the vulnerability exploit the vulnerability, high privileges are required. Microsoft Dynamics:...
Security Updates for Microsoft Dynamics 365 (on-premises) (January 2022)
The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by the following vulnerability: - Spoofing Vulnerability CVE-2022-21891 - Cross-site Scripting Vulnerabilities CVE-2022-21932 Note that Nessus has not attempted to exploit this issue but has instead...
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses lies in improper code generation, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...
Microsoft Faces Wormable, Critical RCE Bug & 6 Zero-Days
Microsoft has addressed a total of 97 security vulnerabilities in its January 2022 Patch Tuesday update – nine of them rated critical – including six that are listed as publicly known zero-days. The fixes cover a swath of the computing giant’s portfolio, including: Microsoft Windows and Windows...
CVE-2022-21932
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...
CVE-2022-21932
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...
CVE-2022-21932
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...
CVE-2022-21891
Microsoft Dynamics 365 on-premises Spoofing Vulnerability...
CVE-2022-21891
Microsoft Dynamics 365 on-premises Spoofing Vulnerability...
Spoofing
Microsoft Dynamics 365 on-premises Spoofing Vulnerability...
CVE-2022-21932
CVE-2022-21932 impacts Microsoft Dynamics 365 Customer Engagement (V9.0, V9.1) and is a reported Cross-Site Scripting (XSS) vulnerability. The core issue is an XSS weakness in the product’s web interface that, per the CVE entry, has a CVSS base score of 7.6 (HIGH) in the Microsoft-provided vector...
