796 matches found
CVE-2025-21177 Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability
...
CVE-2025-21177 Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability
...
CVE-2025-21177
CVE-2025-21177 : Microsoft Dynamics 365 Sales contains a Server-Side Request Forgery (SSRF) that can enable an authenticated attacker to elevate privileges over the network. The issue is documented in multiple feeds (NVD, Microsoft MSRC) with high CVSS scores (8.7–8.8). Public details confirm the...
Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network...
Severe Security Flaws Patched in Microsoft Dynamics 365 and Power Apps Web API
Details have emerged about three now-patched security vulnerabilities in Dynamics 365 and Power Apps Web API that could result in data exposure. The flaws, discovered by Melbourne-based cybersecurity company Stratus Security, have been addressed as of May 2024. Two of the three shortcomings resid...
The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the lack of protective measures for the website structure, allowing attackers to execute a spear-phishing attack.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute a spear-phishing attack remotely...
CVE-2024-49053
Microsoft Dynamics 365 Sales Spoofing Vulnerability...
CVE-2024-49053 Microsoft Dynamics 365 Sales Spoofing Vulnerability
...
CVE-2024-49053
Microsoft Dynamics 365 Sales has a spoofing vulnerability (CVE-2024-49053). Affected component is the Dynamics 365 Sales web interface, with exploits enabling an authenticated user to be tricked into visiting a crafted URL that could redirect to a malicious page. Public sources converge on a fix:...
Microsoft Dynamics 365 跨站脚本漏洞
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. It is used for financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 that stems from th...
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability (CNVD-2024-40535)
Microsoft Dynamics 365 Business Central is a comprehensive business management solution that helps small and medium-sized companies connect their finance, sales, service and operations teams in a single, easy-to-use application. An elevation of privilege vulnerability exists in Microsoft Dynamics...
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses stems from deficiencies in the authentication process, which allows attackers to escalate their privileges.
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to bypass the authentication process and increase their privileges...
KLA73440 PE vulnerability in Microsoft Dynamics
An elevation of privilege vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-43460 Related products Microsoft-Dynamics-365 CVE list CVE-2024-43460 critical Solution Install necessary updates from the KB...
Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-40534)
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises...
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability (CNVD-2024-40536)
Microsoft Dynamics 365 Business Central is a comprehensive business management solution that helps small and medium-sized companies connect their finance, sales, service and operations teams in a single, easy-to-use application. An elevation of privilege vulnerability exists in Microsoft Dynamics...
Security Updates for Microsoft Dynamics 365 Business Central (September 2024)
The Microsoft Dynamics 365 Business Central install is missing security updates. It is, therefore, affected by a privilege escalation vulnerability. An authenticated, remote attacker can exploit this to gain privileged or administrator access to the system. Note that Nessus has not attempted to...
Security Updates for Microsoft Dynamics 365 (on-premises) (September 2024)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by a cross-site scripting XSS vulnerability. The vulnerability exists due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this, ...
CVE-2024-43476
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
