3376 matches found
Cross site scripting
Dynamics CRM Webclient Cross-site Scripting Vulnerability...
Information disclosure
Microsoft Dynamics Business Central/NAV Information Disclosure...
Remote code execution
Microsoft Dynamics 365 for Finance and Operations on-premises Remote Code Execution Vulnerability...
Remote code execution
Microsoft Dynamics 365 for Finance and Operations on-premises Remote Code Execution Vulnerability...
CVE-2020-17158 Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
...
CVE-2020-17158
CVE-2020-17158 affects Microsoft Dynamics 365 for Finance and Operations (on‑premises). It is a remote‑code‑execution vulnerability reported by Microsoft; exploitation is described as post‑authentication/privilege‑required. Microsoft has issued updates via the MSRC advisory CVE-2020-17158 to fix ...
CVE-2020-17152
CVE-2020-17152 affects Microsoft Dynamics 365 for Finance and Operations (on-premises). The connected sources describe a remote code execution vulnerability arising from incorrect code generation management, enabling an attacker to execute arbitrary code on the affected system. The CVSSv3 base sc...
CVE-2020-17152 Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
...
CVE-2020-17147 Dynamics CRM Webclient Cross-site Scripting Vulnerability
...
CVE-2020-17147
CVE-2020-17147 is a cross-site scripting vulnerability affecting Microsoft Dynamics 365 on-premises / Dynamics CRM Webclient. Public records identify the flaw as an XSS risk in the Dynamics CRM Webclient that can spoof UI or exfiltrate data due to improper input validation. The CVE is linked to M...
CVE-2020-17133 Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
...
CVE-2020-17133
CVE-2020-17133 is a Microsoft Dynamics Business Central/NAV information-disclosure vulnerability. The root cause is that the Password field in the Document Service table is not masked, which could allow an authenticated remote attacker (as a system user) to reveal passwords. Public references in ...
Security Updates for Microsoft Dynamics 365 (on-premises) (December 2020)
The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An attacker can exploit this by convincing a user to click a specially crafte...
Service Update 0.23 for Microsoft Dynamics 365 9.0
None None...
Dynamics CRM Webclient Cross-site Scripting Vulnerability
...
Microsoft Dynamics 365 (on-premises) Update 2.25
None None...
Password is not masked in the Document Service table in Microsoft Dynamics NAV 2015 and NAV 2013 R2
Password is not masked in the Document Service table in Microsoft Dynamics NAV 2015 and NAV 2013 R2 Symptoms In Microsoft Dynamics NAV 2015 and Microsoft Dynamics NAV 2013 R2, the Password field is not masked in the Document Service table. Therefore, the field is visible during inspection. To lea...
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
...