3657 matches found
CVE-2020-9049: Improper Authorization
A vulnerability in specified versions of American Dynamics victor Web Client and Software House C•CURE Web Client could allow an unauthenticated attacker on the network to create and sign their own JSON Web Token and use it to execute an HTTP API Method without the need for valid...
Microsoft Dynamics 365 XSS
The vulnerability of the Microsoft Dynamics 365 resource planning software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a specially created link...
Johnson Controls Sensormatic Electronics American Dynamics victor Web Client
1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable remotely Vendor: Sensormatic Electronics, LLC; a subsidiary of Johnson Controls Equipment: American Dynamics victor Web Client, Software House C•CURE Web Client Vulnerability: Improper Authorization 2. RISK EVALUATION Successful exploitation...
CVE-2020-17021
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2020-17006
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2020-17018
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2020-17021
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2020-17018
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2020-17006
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2020-17005
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2020-17005
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2020-17021 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
CVE-2020-17021
CVE-2020-17021 applies to Microsoft Dynamics 365 (on-premises) and is a Cross-site Scripting (XSS) vulnerability arising from inadequate protection of the web page structure that can allow a malicious user to execute script in the context of the current authenticated user. Affected products/versi...
CVE-2020-17018
CVE-2020-17018 is a Cross-site Scripting (XSS) vulnerability affecting Microsoft Dynamics 365 (on‑premises). Connected sources indicate affected products include Microsoft Dynamics 365 (on‑premises) v9.0, Microsoft Dynamics CRM 2015 (on‑premises) v7.0, and Microsoft Dynamics 365 (on‑premises) v8....