PT-2024-1829 · Microsoft · Dynamics 365 Customer Engagement

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 Customer Engagement affected versions not specified Description: The issue is related to insufficient protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to conduct cross-site...

The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software lies in insufficient validation of input data, allowing a hacker to trigger a service failure.

The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-0019723)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

Microsoft Dynamics 365 for Finance and Operations Denial of Service Vulnerability

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A denial of service vulnerability exists in Microsoft Dynamics 365 for Finance and...

CVE-2023-36020

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-36020

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-35621

Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability...

CVE-2023-35621

Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Denial of service

Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability...

CVE-2023-35621 Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability

...

CVE-2023-35621

CVE-2023-35621 is a Denial-of-Service vulnerability affecting Microsoft Dynamics 365 for Finance and Operations (on‑premises). The issue is exposed over the network and can be triggered remotely to impact availability; CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5, HIGH). Connect...

CVE-2023-36020 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Security Updates for Microsoft Dynamics 365 (on-premises) (December 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services. CVE-2023-35621 - A sessio...

PT-2023-8052 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to conduct a cross-site scripting...

Microsoft Dynamics 365 安全漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A denial of service vulnerability exists in Microsoft Dynamics 365 for Finance and...

Microsoft Dynamics 365 安全漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

The vulnerability of the Microsoft Dynamics 365 resource planning software server arises from the lack of security measures taken to protect the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software server exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack remotely...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-00199)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-00198)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...