1403 matches found
Cross site scripting
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...
CVE-2020-1063
CVE-2020-1063 is an authenticated-cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises). The Red Hat and Microsoft advisories corroborate that an attacker with valid authentication could exploit specially crafted web requests to run script in the user’s browser, reading or al...
The vulnerability of the Microsoft Dynamics 365 resource planning software server allows attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft Dynamics 365 resource planning software server is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by using specially crafted requests...
The vulnerability of the Microsoft Dynamics 365 resource planning software server allows attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft Dynamics 365 resource planning software server is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by using specially crafted requests...
Microsoft Dynamics CRM 2011 Update Rollup 11
Microsoft Dynamics CRM 2011 Update Rollup 11 INTRODUCTION Update Rollup 11 for Microsoft Dynamics CRM 2011 is available. This article describes the hotfixes and updates that are included in this update rollup. This update rollup is available for all languages that are supported by Microsoft...
Microsoft Dynamics CRM 2011 Update Rollup 13
Microsoft Dynamics CRM 2011 Update Rollup 13 INTRODUCTION Update Rollup 13 for Microsoft Dynamics CRM 2011 is now available. This article describes the hotfixes and updates that are included in this update rollup. This update rollup is available for all languages that are supported by Microsoft...
The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV lies in the improper elimination of certain elements in the output data used by the incoming component, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV is related to incorrect elimination of special elements in the output data used by the incoming component. Exploitation of this vulnerability can allow...
The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access...
Security Updates for Microsoft Dynamics NAV (Dec 2018)
The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this, by sending a specially crafte...
Service Update 0.16 for Microsoft Dynamics 365 9.0
Service Update 0.16 for Microsoft Dynamics 365 9.0 INTRODUCTION Service Update 9.0.16 for Microsoft Dynamics CRM on-premises 9.0 is now available. This article describes the hotfixes and updates that are included in Service Update 9.0.16. MORE INFORMATION Update package| Version number ---|---...
Microsoft Dynamics 365 (on-premises) Update 2.18
Microsoft Dynamics 365 on-premises Update 2.18 Introduction Service Update 2.18 for Microsoft Dynamics CRM on-premises 8.2 is now available. This article describes the hotfixes and updates that are included in Service Update 2.18. More Information Update package| Version number ---|--- Microsoft...
Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...
KLA11775 XSS vulnerability in Microsoft Dynamics
XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2020-1063 Related products Microsoft-Dynamics-365 CVE list CVE-2020-1063 warning KB list 4552002 4551998 Solution Install necessary updates from the K...
Security Updates for Microsoft Dynamics 365 (on-premises) (May 2020)
The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by the following vulnerabilities : - A cross-site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynami...
Security Updates for Microsoft Dynamics NAV (Apr 2020)
The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists in Dynamics NAV due to the application not properly hiding the value of a masked field when showing the records as a char...
Security Updates for Microsoft Dynamics 365 Business Central (Mar 2020)
The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by a remote code execution vulnerability due to an issue with the Role-Tailored Client. An authenticated, remote attacker can exploit this to execute arbitrary commands or elevate...
Security Updates for Microsoft Dynamics NAV (Mar 2020)
The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by a remote code execution vulnerability due to an issue with the Role-Tailored Client. An authenticated, remote attacker can exploit this to execute arbitrary commands or elevate privileges. Note that...
Security Updates for Microsoft Dynamics 365 Business Central (Apr 2020)
The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by a the following vulnerabilities : - An information disclosure vulnerability exists in Business Central due to the application not properly hiding the value of a masked field when showin...