3657 matches found
CVE-2021-40440
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability...
CVE-2021-40440
CVE-2021-40440 is a cross-site scripting (XSS) vulnerability affecting Microsoft Dynamics 365 Business Central (notably 2020 Release Wave 2 Update 17.10 and 2021 Release Wave 1 Update 18.5). The issue allows arbitrary script execution in the browser when visiting the Dynamics BC Control, as descr...
CVE-2021-40440 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
...
Siemens STAR-CCM+ Viewer Out-of-Bounds Write Vulnerability
Simcenter STAR-CCM+ is a multi-physics computational fluid dynamics CFD software used to simulate products operating under real-world conditions. An out-of-bounds write vulnerability exists in Siemens STAR-CCM+ Viewer, which can be exploited by an attacker to execute code in the context of the...
CVE-2021-40440: Improper Neutralization of Input During Web Page Generation
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability...
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
...
Update 18.5 for Microsoft Dynamics 365 Business Central 2021 Release Wave 1 (Application Build 18.5.29545, Platform Build 18.0.29486): September 14, 2021 (KB5006076)
None None...
Update 17.10 for Microsoft Dynamics 365 Business Central 2020 Release Wave 2 (Application Build 17.10.29463, Platform Build 17.0.29460): September 14, 2021 (KB5006075)
None None...
PT-2021-7043 · Microsoft · Dynamics Nav +1
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics Business Central affected versions not specified Microsoft Dynamics NAV affected versions not specified Description: The issue is related to a cross-site scripting vulnerability in Microsoft Dynamics Business Central and...
Vulnerability fixed in Microsoft Dynamics
Microsoft has fixed a vulnerability in Microsoft Dynamics Business Central Control. A malicious party could exploit the vulnerability to perform of a Cross-Site Scripting XSS attack. Such an attack can lead to the execution of arbitrary script code in the browser with which the application is...
Security Updates for Microsoft Dynamics 365 (on-premises) (September 2021)
The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by the following vulnerability: - A cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input before returning it to users. An attacker can exploit this by...
KLA12287 XSS vulnerability in Microsoft Dynamics
A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to perform cross-site scripting attack. Original advisories CVE-2021-40440 Exploitation Related products Microsoft-Dynamics-365 CVE list CVE-2021-40440 unknown KB list 5006076...
Microsoft Dynamics 365 Code Execution
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...
Microsoft Dynamics 365 XSS
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malicious link...
CVE-2021-36946
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability...
CVE-2021-36950
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2021-36950
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2021-36946
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability...