3635 matches found
CVE-2025-29821 Microsoft Dynamics Business Central Information Disclosure Vulnerability
...
Update 25.6 for Microsoft Dynamics 365 Business Central 2024 Release Wave 2 (Application Build 25.6.32556, Platform Build 25.2.32308)
None None...
Update 24.12 for Microsoft Dynamics 365 Business Central 2024 Release Wave 1 (Application Build 24.12.32447, Platform Build 24.0.32305)
None None...
Update 23.18 for Microsoft Dynamics 365 Business Central 2023 Release Wave 2 (Application Build 23.18.32409, Platform Build 23.0.32309)
None None...
Microsoft Dynamics Business Central Information Disclosure Vulnerability
Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...
PT-2025-15593 · Microsoft · Dynamics Business Central
Name of the Vulnerable Software and Affected Versions: Dynamics Business Central affected versions not specified Description: The issue is related to improper input validation, which allows an authorized attacker to disclose information locally. This means that an attacker with authorization can...
CVE-2025-29821: Improper Input Validation
Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...
KLA82403 OSI vulnerability in Microsoft Dynamics
Information disclosure vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2025-29821 Exploitation Related products Microsoft-Dynamics-365 CVE list CVE-2025-29821 high ...
KLA81934 ACE vulnerability in Microsoft Dynamics
A remote code execution vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-29807 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Dynamics-365 CVE list...
KLA81600 PE vulnerability in Microsoft Dynamics
An elevation of privilege vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-24053 Exploitation Related products Dynamics-CRM-Service CVE list CVE-2025-24053 high KB list Solution Install necessary updates...
The vulnerability of the Microsoft Dynamics 365 Sales resource planning software server lies in insufficient validation of requests on the server side, allowing attackers to increase their privileges.
The vulnerability of the Microsoft Dynamics 365 Sales resource planning software server relates to insufficient validation of requests on the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
KLA80251 PE vulnerability in Microsoft Dynamics
An elevation of privilege vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-24989 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2025-24989 critical KB list Solution Install...
Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability
Microsoft Dynamics 365 Sales is a powerful tool designed to streamline and enhance the sales process, providing sales teams with the insights and data to build strong customer relationships and close deals effectively. An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Sales...
Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for February of 2025 which includes 63 vulnerabilities affecting a range of products, including 4 that Microsoft marked as "critical" and one marked as "moderate." There are two notable "critical" vulnerabilities. The first is CVE-2025-21376, whi...
CVE-2025-21177
Server-Side Request Forgery SSRF in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network...
CVE-2025-21177
Server-side request forgery ssrf in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network...
CVE-2025-21177 Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability
...
CVE-2025-21177 Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability
...
CVE-2025-21177
CVE-2025-21177 : Microsoft Dynamics 365 Sales contains a Server-Side Request Forgery (SSRF) that can enable an authenticated attacker to elevate privileges over the network. The issue is documented in multiple feeds (NVD, Microsoft MSRC) with high CVSS scores (8.7–8.8). Public details confirm the...