PT-2021-7043 · Microsoft · Dynamics Nav +1

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics Business Central affected versions not specified Microsoft Dynamics NAV affected versions not specified Description: The issue is related to a cross-site scripting vulnerability in Microsoft Dynamics Business Central and...

KLA12287 XSS vulnerability in Microsoft Dynamics

A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to perform cross-site scripting attack. Original advisories CVE-2021-40440 Related products Microsoft-Dynamics-365 CVE list CVE-2021-40440 unknown KB list 5006076 5006075...

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to improper code generation management, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malicious link...

CVE-2021-36950

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2021-36946

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability...

CVE-2021-36950

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2021-36946

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability...

CVE-2021-34524

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

CVE-2021-34524

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

CVE-2021-36950

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Remote code execution

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

Cross site scripting

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability...

CVE-2021-36946

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability...

CVE-2021-36950

CVE-2021-36950 is a Microsoft Dynamics 365 (on‑premises) Cross-site Scripting Vulnerability affecting (per CNVD) Dynamics 365 on‑premises version 9.0. The available sources consistently describe it as an XSS issue enabling UI spoofing. The concrete root cause details are not provided in the docum...

CVE-2021-36950 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2021-36946 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

...

CVE-2021-36946

CVE-2021-36946 is a Cross-site Scripting (XSS) vulnerability in Microsoft Dynamics Business Central (and related NAV products in linked updates). The connected docs confirm the issue, with references to Microsoft Dynamics BC NAV exposure and multiple security updates in 2021 that address the XSS ...

CVE-2021-34524

CVE-2021-34524 is a Microsoft Dynamics 365 (on-premises) Remote Code Execution vulnerability. The CVE is reflected in multiple feeds as affecting Microsoft Dynamics 365 On-Premises (versions around 9.x per CNNVD) and is addressed by Microsoft security updates (KBs 4618795, 4618809, 5005239) and M...