CVE-2023-36416 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-36416 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2023-36416

CVE-2023-36416 is a Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability affecting the web UI. Public sources describe an XSS flaw that could allow an attacker to steal cookie-based authentication credentials or spoof the user interface. CVSS v3.1 indicates network access with ...

CVE-2023-36429 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2023-36429

CVE-2023-36429 affects Microsoft Dynamics 365 (On-Premises). It is an information-disclosure vulnerability in the Dynamics 365 On-Premises deployment that could allow an attacker to obtain sensitive information. According to the CVE metrics, it has CVSS v3.1 base score 6.5 (Medium) with a Network...

CVE-2023-36429 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2023-36433

CVE-2023-36433 affects Microsoft Dynamics 365 (on-premises) 9.0 and 9.1 with an information-disclosure vulnerability. Root cause details are not fully specified in the provided documents, but the impact is access to sensitive data. CVSSv3.1 metrics: Network attack, low complexity, user interactio...

CVE-2023-36433 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2023-36433 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

Service Update 0.47 for Microsoft Dynamics 365 9.0

None None...

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

PT-2023-5959 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 affected versions not specified Description: The issue is related to insufficient protection of service data in Microsoft Dynamics 365, which can be exploited by a remote attacker to gain unauthorized access to protecte...

Microsoft Dynamics 365 安全漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. An information disclosure vulnerability exists in Microsoft Dynamics 365...

Microsoft Dynamics 365 跨站脚本漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. Microsoft Dynamics 365 on-premises cross-site scripting vulnerability can be...

Microsoft Dynamics 365 安全漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. An information disclosure vulnerability exists in Microsoft Dynamics 365...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-00200)

Microsoft Dynamics 365 on-premises is a set of intelligent business applications from Microsoft Corporation USA that help you run your overall business and achieve better results through predictive AI-driven insights. A cross-site scripting vulnerability exists in Microsoft Dynamics 365...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-00201)

Microsoft Dynamics 365 on-premises is a set of intelligent business applications from Microsoft Corporation USA that help you run your overall business and achieve better results through predictive AI-driven insights. A cross-site scripting vulnerability exists in Microsoft Dynamics 365...

The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Security Updates for Microsoft Dynamics 365 (on-premises) (September 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple Cross-site Scripting vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...