Lucene search
+L

796 matches found

Cvelist
Cvelist
added 2025/08/12 5:10 p.m.17 views

CVE-2025-53728 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

6.5CVSS0.01181EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/12 5:09 p.m.1 views

CVE-2025-49745 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

5.4CVSS7.2AI score0.00508EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/12 5:09 p.m.52 views

CVE-2025-49745

CVE-2025-49745 affects Microsoft Dynamics 365 (on-premises) (version 9.1). It is a cross-site scripting vulnerability caused by improper neutralization of input during web page generation, enabling an attacker to spoof the user interface over a network. The vulnerability requires user interaction...

5.4CVSS6.9AI score0.00508EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
added 2025/08/12 7:00 a.m.9 views

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to perform spoofing over a network...

5.4CVSS7.1AI score0.00508EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/08/12 7:00 a.m.14 views

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...

6.5CVSS6.6AI score0.01181EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/08/12 12:00 a.m.10 views

Microsoft Dynamics 365 信息泄露漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. It is used for financial management, production management and business intelligence management. An information disclosure vulnerability exists in Microsoft Dynamics 365 on-premises. An...

6.5CVSS5.7AI score0.01181EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2025/08/12 12:00 a.m.15 views

KLA86582 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premises can be...

6.5CVSS6.7AI score0.01181EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/06/19 12:00 a.m.28 views

PT-2025-26260 · Microsoft · Dynamics 365 Fasttrack Implementation Assets

Name of the Vulnerable Software and Affected Versions: Dynamics 365 FastTrack Implementation Assets affected versions not specified Description: The issue concerns the exposure of private personal information to unauthorized actors in Dynamics 365 FastTrack Implementation Assets, allowing attacke...

7.8CVSS5.9AI score0.00685EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2025/05/22 5:40 p.m.13 views

CVE-2020-1050

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'. This CVE ID is unique from CVE-2020-1049...

6.1CVSS5.6AI score0.01836EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:17 p.m.6 views

CVE-2020-0656

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...

5.4CVSS4.7AI score0.01475EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:08 p.m.13 views

CVE-2020-1063

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...

5.4CVSS5.7AI score0.01489EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:35 a.m.12 views

CVE-2019-1375

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...

5.4CVSS5.7AI score0.0156EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:23 a.m.9 views

CVE-2018-8654

An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Server, aka 'Microsoft Dynamics 365 Elevation of Privilege Vulnerability'...

6.5CVSS6.9AI score0.01763EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:00 a.m.12 views

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in insufficient validation of input data, allowing an attacker to disclose sensitive information.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

8.1CVSS5.4AI score0.01275EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
added 2025/04/08 2:00 p.m.24 views

Update 24.12 for Microsoft Dynamics 365 Business Central 2024 Release Wave 1 (Application Build 24.12.32447, Platform Build 24.0.32305)

None None...

5.5CVSS6.6AI score0.00632EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2025/04/08 2:00 p.m.22 views

Update 23.18 for Microsoft Dynamics 365 Business Central 2023 Release Wave 2 (Application Build 23.18.32409, Platform Build 23.0.32309)

None None...

5.5CVSS6.6AI score0.00632EPSS
SaveExploits0
CNVD
CNVD
added 2025/02/13 12:00 a.m.20 views

Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability

Microsoft Dynamics 365 Sales is a powerful tool designed to streamline and enhance the sales process, providing sales teams with the insights and data to build strong customer relationships and close deals effectively. An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Sales...

8.8CVSS8.5AI score0.01125EPSS
SaveExploits0References1
Talos Blog
Talos Blog
added 2025/02/11 7:24 p.m.27 views

Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for February of 2025 which includes 63 vulnerabilities affecting a range of products, including 4 that Microsoft marked as "critical" and one marked as "moderate." There are two notable "critical" vulnerabilities. The first is CVE-2025-21376, whi...

9CVSS9.4AI score0.34488EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/08 11:17 p.m.12 views

CVE-2025-21177

Server-Side Request Forgery SSRF in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network...

8.8CVSS6.6AI score0.01125EPSS
SaveExploits0References3
NVD
NVD
added 2025/02/06 11:15 p.m.36 views

CVE-2025-21177

Server-side request forgery ssrf in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network...

8.8CVSS0.01125EPSS
SaveExploits0References1
Rows per page
Query Builder