3635 matches found
PT-2024-9885
Name of the Vulnerable Software and Affected Versions: Dynamics 365 Business Central affected versions not specified Description: The issue is related to improper authorization in Dynamics 365 Business Central, allowing an authenticated attacker to elevate privileges over a network. This can be...
KLA73440 PE vulnerability in Microsoft Dynamics
An elevation of privilege vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-43460 Exploitation Related products Microsoft-Dynamics-365 CVE list CVE-2024-43460 critical Solution Install necessary updates...
CVE-2024-43460: Improper Authorization
Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network...
Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-40534)
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises...
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability (CNVD-2024-40536)
Microsoft Dynamics 365 Business Central is a comprehensive business management solution that helps small and medium-sized companies connect their finance, sales, service and operations teams in a single, easy-to-use application. An elevation of privilege vulnerability exists in Microsoft Dynamics...
Security Updates for Microsoft Dynamics 365 Business Central (September 2024)
The Microsoft Dynamics 365 Business Central install is missing security updates. It is, therefore, affected by a privilege escalation vulnerability. An authenticated, remote attacker can exploit this to gain privileged or administrator access to the system. Note that Nessus has not attempted to...
Security Updates for Microsoft Dynamics 365 (on-premises) (September 2024)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by a cross-site scripting XSS vulnerability. The vulnerability exists due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this, ...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft has fixed vulnerabilities in Dynamics. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges to potentially execute code within the application, or to conduct a Cross-Site Scripting attack. Such an attack could result in execution of code in the...
CVE-2024-43476
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2024-43476
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2024-38225
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability...
CVE-2024-43476 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
CVE-2024-43476
CVE-2024-43476 : A cross-site scripting vulnerability exists in Microsoft Dynamics 365 (on-premises). The root cause is improper validation of user-supplied input before rendering it to users, leading to potential cookie-based credential theft and other XSS impacts. The CVSS v3.1 base score is 7....
CVE-2024-43476 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
CVE-2024-38225 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
...
CVE-2024-38225 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
...
CVE-2024-38225
CVE-2024-38225 affects Microsoft Dynamics 365 Business Central with an Elevation of Privilege vulnerability. Connected sources confirm impact and remediation via Microsoft updates (Wave 1 24.4, Wave 2 23.10). CVSS details in NVD/Microsoft advisories show high/critical scores and network/low compl...
EUVD-2024-37191
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability...
