Password is not masked in the Document Service table in Microsoft Dynamics NAV 2015 and NAV 2013 R2

Password is not masked in the Document Service table in Microsoft Dynamics NAV 2015 and NAV 2013 R2 Symptoms In Microsoft Dynamics NAV 2015 and Microsoft Dynamics NAV 2013 R2, the Password field is not masked in the Document Service table. Therefore, the field is visible during inspection. To lea...

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

...

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

...

Dynamics CRM Webclient Cross-site Scripting Vulnerability

...

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

...

Microsoft Dynamics 365 Commerce Remote Code Execution (CVE-2020-17152)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Microsoft Dynamics Business Central is an enterprise resource planning system from Microsoft. The system includes features such as financial management, project management, and supply chain management. An information disclosure vulnerability exists in Microsoft Dynamics Business Central. The...

Microsoft Dynamics 365 for Finance and Operations Remote Code Execution (CVE-2020-17158)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PT-2020-5230 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365, which can be exploited by a remote attacker to perform a cross-site scripti...

Microsoft Dynamics 365 Code Injection Vulnerability

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A code injection vulnerability exists in Microsoft Dynamics 365. The following...

Microsoft Dynamics 365 Code Injection Vulnerability

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A code injection vulnerability exists in Microsoft Dynamics 365 for Finance and...

Microsoft Dynamics 365 Cross-Site Scripting Vulnerability

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365. The followi...

PT-2020-5215 · Microsoft · Visual Studio Code Java Extension Pack +1

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 for Finance and Operations on-premises affected versions not specified Microsoft Visual Studio Code Java Extension affected versions not specified Description: The issue concerns a remote code execution vulnerability an...

Vulnerabilities fixed in Microsoft Dynamics

Microsoft fixes multiple vulnerabilities in Microsoft Dynamics products. A malicious party could exploit the vulnerabilities to perform Cross-Site Scripting XSS or Remote Code Execution RCE. Such an attack can only be performed by an authenticated user or administrator. Microsoft Dynamics:...

KLA12026 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Dynamics CRM Webclie...

PT-2020-5241 · Microsoft · Dynamics Business Central

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics Business Central/NAV affected versions not specified Description: The issue is related to a lack of protection for service data in the integrated enterprise management system Microsoft Dynamics NAV. Exploitation of this iss...

Microsoft Dynamics 365 XSS

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Microsoft Dynamics 365 XSS

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Microsoft Dynamics 365 XSS

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Microsoft Dynamics 365 XSS

The vulnerability of the Microsoft Dynamics 365 customer relationship management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...