3635 matches found
The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the lack of measures taken to protect the website structure, allowing attackers to perform spear-phishing attacks.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of operational data, which allows an attacker to disclose sensitive information.
The vulnerability of the Microsoft Dynamics 365 resource planning software relates to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Ransomware Negotiation: Dynamics and Privacy-Preserving Mechanism Design
Ransomware attacks have become a pervasive and costly form of cybercrime, causing tens of millions of dollars in losses as organizations increasingly pay ransoms to mitigate operational disruptions and financial risks. While prior research has largely focused on proactive defenses, the...
CVE-2025-49745
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-53728
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...
Security Updates for Microsoft Dynamics 365 (on-premises) (August 2025) - CVE-2025-53728
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. Note that Nessus has not tested for this issue but has instead relied only on the...
Security Updates for Microsoft Dynamics 365 (on-premises) (August 2025) - CVE-2025-49745
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by a cross-site scripting XSS vulnerability. The vulnerability exists due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this, ...
CVE-2025-53728
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...
CVE-2025-53728
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...
CVE-2025-49745
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-49745
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-53728 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
...
CVE-2025-53728 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
...
CVE-2025-53728
CVE-2025-53728 affects Microsoft Dynamics 365 (on-premises) (version 9.1) with an information disclosure vulnerability that allows an unauthenticated network attacker to obtain sensitive data. The root cause is exposure of information to an unauthorized actor over a network. Microsoft has release...
CVE-2025-49745
CVE-2025-49745 affects Microsoft Dynamics 365 (on-premises) (version 9.1). It is a cross-site scripting vulnerability caused by improper neutralization of input during web page generation, enabling an attacker to spoof the user interface over a network. The vulnerability requires user interaction...
CVE-2025-49745 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
CVE-2025-49745 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to perform spoofing over a network...
