CVE-2020-9048 victor Web Client - Arbitrary File Deletion Vulnerability

A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could allow a remote unauthenticated attacker on the network to delete arbitrary files on the system or render the system unusable by conducting a Denial of Service attack...

CVE-2020-9048

CVE-2020-9048 affects American Dynamics victor Web Client and Software House CCURE Web Client. The root cause is Improper Authorization (CWE-285) allowing a remote, unauthenticated attacker on an adjacent network to delete arbitrary files or cause a DoS, potentially rendering the system unusable....

CVE-2020-9048: Improper Authorization

A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could allow a remote unauthenticated attacker on the network to delete arbitrary files on the system or render the system unusable by conducting a Denial of Service attack...

PT-2020-20461 · American Dynamics +1 · American Dynamics Victor Web Client +1

Name of the Vulnerable Software and Affected Versions: American Dynamics victor Web Client versions up to and including v5.4.1 Software House CCURE Web Client affected versions not specified Description: A remote unauthenticated attacker on the network could delete arbitrary files on the system o...

Dynamics server software Code Execution

The vulnerability of the Dynamics resource planning software for Microsoft Dynamics 365 relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Dynamics 365 XSS

The vulnerability of the Microsoft Dynamics 365 resource planning software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using specially crafted requests...

Microsoft Dynamics 365 XSS

The vulnerability of the Microsoft Dynamics 365 resource planning software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using specially crafted requests...

"School From Home" Changes Residential Internet Safety and Security Dynamics

2020 has been a year of epic change as we all work together to minimize the adverse impact of COVID-19. There's been extensive coverage in blogs and media as businesses navigated a rapid transition to remote work for their employees and pivoted to address an entirely new set of security...

Dynamics server XSS

The vulnerability of the Dynamics resource planning software for Microsoft Dynamics 365 relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Dynamics server software Code Execution

The vulnerability of the Dynamics resource planning software for Microsoft Dynamics 365 relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Dynamics server XSS

The vulnerability of the Dynamics resource planning software for Microsoft Dynamics 365 relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Microsoft Dynamics 365 for Finance and Operations Code Execution

The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software is related to processing errors with input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Dynamics 365 XSS

The vulnerability of the Microsoft Dynamics 365 resource planning software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using specially crafted requests...

Microsoft Dynamics 365 XSS

The vulnerability of the Microsoft Dynamics 365 customer relationship management system is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by using specially crafted requests...

Microsoft Dynamics 365 XSS

The vulnerability of the Microsoft Dynamics 365 resource planning software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using specially crafted requests...

CVE-2020-16872

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

CVE-2020-16864

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

CVE-2020-16862

A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...

CVE-2020-16878

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

CVE-2020-16860

A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...