Vulnerabilities fixed in Microsoft Dynamics

Microsoft has fixed two vulnerabilities in Dynamics. A malicious party could exploit the vulnerabilities to impersonate as another user and potentially gain access to sensitive data. Microsoft Dynamics: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...

Security Updates for Microsoft Dynamics 365 (on-premises) (February 2021)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by an information disclosure vulnerability in Microsoft Dataverse. An authenticated, remote attacker could exploit this to obtain data stored in the underlying datasets in Dataverse, that could include...

The vulnerability of the integrated enterprise management system of Microsoft Dynamics NAV, related to the lack of protection for operational data, allows a perpetrator to gain access to protected information.

The vulnerability of the integrated Microsoft Dynamics NAV enterprise management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software lies in improper code generation management, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software is related to improper code generation. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2020-17147

Dynamics CRM Webclient Cross-site Scripting Vulnerability...

CVE-2020-17152

Microsoft Dynamics 365 for Finance and Operations on-premises Remote Code Execution Vulnerability...

CVE-2020-17158

Microsoft Dynamics 365 for Finance and Operations on-premises Remote Code Execution Vulnerability...

CVE-2020-17158

Microsoft Dynamics 365 for Finance and Operations on-premises Remote Code Execution Vulnerability...

CVE-2020-17133

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability...

Information disclosure

Microsoft Dynamics Business Central/NAV Information Disclosure...

Remote code execution

Microsoft Dynamics 365 for Finance and Operations on-premises Remote Code Execution Vulnerability...

Remote code execution

Microsoft Dynamics 365 for Finance and Operations on-premises Remote Code Execution Vulnerability...

CVE-2020-17158 Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

...

CVE-2020-17158

CVE-2020-17158 affects Microsoft Dynamics 365 for Finance and Operations (on‑premises). It is a remote‑code‑execution vulnerability reported by Microsoft; exploitation is described as post‑authentication/privilege‑required. Microsoft has issued updates via the MSRC advisory CVE-2020-17158 to fix ...

CVE-2020-17152 Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

...

CVE-2020-17133 Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

...

Security Updates for Microsoft Dynamics 365 (on-premises) (December 2020)

The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An attacker can exploit this by convincing a user to click a specially crafte...

Microsoft Dynamics 365 (on-premises) Update 2.25

None None...

Service Update 0.23 for Microsoft Dynamics 365 9.0

None None...

Password is not masked in the Document Service table in Microsoft Dynamics NAV 2015 and NAV 2013 R2

Password is not masked in the Document Service table in Microsoft Dynamics NAV 2015 and NAV 2013 R2 Symptoms In Microsoft Dynamics NAV 2015 and Microsoft Dynamics NAV 2013 R2, the Password field is not masked in the Document Service table. Therefore, the field is visible during inspection. To lea...