Lucene search
+L

3376 matches found

BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.10 views

The vulnerability of the Microsoft Dynamics 365 customer relationship management system lies in the insufficient protection of its web page structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 customer relationship management system is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by using specially crafted requests...

5.5CVSS6AI score0.01634EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.12 views

The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software, related to input data processing errors, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software is related to processing errors with input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.5CVSS7.5AI score0.02466EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.12 views

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the lack of protective measures for the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using specially crafted requests...

5.4CVSS6AI score0.01634EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/09/11 5:15 p.m.5 views

CVE-2020-16862

A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...

7.1CVSS7.7AI score0.0335EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/11 5:15 p.m.22 views

CVE-2020-16861

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

5.4CVSS0.01594EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/11 5:15 p.m.31 views

CVE-2020-16859

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

5.4CVSS0.01634EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/11 5:15 p.m.20 views

CVE-2020-16864

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

5.4CVSS0.01594EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/11 5:15 p.m.29 views

CVE-2020-16872

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

7.6CVSS0.01807EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/11 5:15 p.m.6 views

CVE-2020-16871

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

5.4CVSS6.3AI score0.01634EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/11 5:15 p.m.7 views

CVE-2020-16860

A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...

6.8CVSS7.5AI score0.02741EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/11 5:15 p.m.31 views

CVE-2020-16871

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

5.4CVSS0.01634EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/11 5:15 p.m.6 views

CVE-2020-16878

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

5.4CVSS6.3AI score0.01634EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/11 5:15 p.m.4 views

CVE-2020-16861

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

5.4CVSS6.3AI score0.01594EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/11 5:15 p.m.6 views

CVE-2020-16859

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

5.4CVSS6.3AI score0.01634EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/11 5:15 p.m.6 views

CVE-2020-16864

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

5.4CVSS6.3AI score0.01594EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/11 5:15 p.m.7 views

CVE-2020-16872

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

7.6CVSS6.7AI score0.01807EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/11 5:15 p.m.27 views

CVE-2020-16878

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

5.4CVSS0.01634EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/11 5:15 p.m.37 views

CVE-2020-16860

A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...

8.8CVSS0.02741EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/11 5:15 p.m.34 views

CVE-2020-16862

A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...

8.8CVSS0.0335EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/11 5:15 p.m.8 views

CVE-2020-16857

A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations on-premises version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server. An authenticated attacke...

7.1CVSS7.7AI score0.02466EPSS
SaveExploits0References1
Rows per page
Query Builder