Microsoft Dynamics CRM Remote Code Execution Vulnerability (CNVD-2022-63616)

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. No details of the vulnerability...

Microsoft Dynamics CRM Remote Code Execution Vulnerability

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. No details of the vulnerability...

Why Artificial Intelligence is Must for Cybersecurity

By Waqas Executives across the globe are already advocating the use of artificial intelligence AI to tackle cybersecurity threats. This is a post from HackRead.com Read the original post: Why Artificial Intelligence is Must for Cybersecurity...

CVE-2020-19587

Cross Site Scripting XSS vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI...

CVE-2020-19586

Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI...

Cross site scripting

Cross Site Scripting XSS vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI...

CVE-2020-19587

CVE-2020-19587 denotes a Cross Site Scripting (XSS) vulnerability in Yellowfin Business Intelligence 7.3, originating from configMap parameters exposed via the MIAdminStyles.i4 Admin UI. The issue enables a remote attacker to run arbitrary code and has a CVSS v3.1 base score of 5.4 (Medium) with ...

CVE-2020-19587

Cross Site Scripting XSS vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI...

CVE-2020-19586

CVE-2020-19586 affects Yellowfin Business Intelligence 7.3, specifically an incorrect access control in the MIAdminStyles.i4 Admin UI that enables remote privilege escalation. The issue is tied to how privileges are enforced in the Admin UI, allowing an attacker to escalate rights. Documented in ...

PT-2022-8601 · Yellowfin · Yellowfin Business Intelligence

Name of the Vulnerable Software and Affected Versions: Yellowfin Business Intelligence version 7.3 Description: The issue is related to Incorrect Access Control, allowing remote attackers to escalate privileges via the MIAdminStyles.i4 Admin UI. Recommendations: For Yellowfin Business Intelligenc...

PT-2022-8602 · Yellowfin · Yellowfin Business Intelligence

Name of the Vulnerable Software and Affected Versions: Yellowfin Business Intelligence version 7.3 Description: The issue is related to a Cross Site Scripting XSS vulnerability in configMap parameters. This allows remote attackers to run arbitrary code via the MIAdminStyles.i4 Admin UI...

CVE-2020-19587: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI...

CVE-2020-19586: Improper Neutralization of Input During Web Page Generation

Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI...

CVE-2022-39014

Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console CMC - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted...

Microsoft Dynamics security vulnerabilities

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. No details of the vulnerability...

SAP BusinessObjects Business Intelligence Platform information leakage vulnerability

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly and...

PT-2022-21175 · Sap Se +1 · Sap Businessobjects Business Intelligence Platform +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows an attacker with high privilege access and authenticated as a CMS administrator to access and modify system data in the BOE Commentary database. This can be done under...

CVE-2022-39014: Missing Encryption of Sensitive Data

Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console CMC - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted...

Iranian APT42 Launched Over 30 Espionage Attacks Against Activists and Dissidents

A state-sponsored advanced persistent threat APT actor newly christened APT42 formerly UNC788 has been attributed to over 30 confirmed espionage attacks against individuals and organizations of strategic interest to the Iranian government at least since 2015. Cybersecurity firm Mandiant said the...

U.S. Imposes New Sanctions on Iran Over Cyberattack on Albania

The U.S. Treasury Department on Friday announced sanctions against Iran's Ministry of Intelligence and Security MOIS and its Minister of Intelligence, Esmaeil Khatib, for engaging in cyber-enabled activities against the nation and its allies. "Since at least 2007, the MOIS and its cyber actor...