795 matches found
CVE-2022-21957
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...
CVE-2022-21957 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
...
CVE-2022-21957 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
...
CVE-2022-21957
CVE-2022-21957 affects Microsoft Dynamics 365 (on-premises) / Dynamics CRM on-premises. The provided sources confirm a remote code execution vulnerability in Microsoft Dynamics 365 On-Premises, with CVSS3.1 base score 7.2 (HIGH) and CVSS2 base score 6.5 (MEDIUM). Concrete technical details (affec...
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
...
KLA12452 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Dynamics GP can be...
Security Updates for Microsoft Dynamics 365 (on-premises) (January 2022)
The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by the following vulnerability: - Spoofing Vulnerability CVE-2022-21891 - Cross-site Scripting Vulnerabilities CVE-2022-21932 Note that Nessus has not attempted to exploit this issue but has instead...
CVE-2022-21932
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...
CVE-2022-21932
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...
CVE-2022-21891
Microsoft Dynamics 365 on-premises Spoofing Vulnerability...
Spoofing
Microsoft Dynamics 365 on-premises Spoofing Vulnerability...
CVE-2022-21932 Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
...
CVE-2022-21891 Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability
...
CVE-2022-21891
Technical details (affected product versions, root cause, exploitation details, or fix version) are not publicly provided in the connected documents. Monitor for official advisories (MSRC/MSKB) for precise impact, remediation steps, and affected configurations.
PT-2022-1842 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 affected versions not specified Description: The issue is related to insufficient protection of the web page structure in Microsoft Dynamics 365, allowing for cross-site scripting attacks. An attacker could exploit this...
The vulnerability of the Microsoft Dynamics 365 resource planning software, related to improper code generation management, allows an attacker to execute arbitrary code.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to improper code generation. Exploitation of this vulnerability allows a malicious actor to execute arbitrary code remotely and completely compromise the vulnerable system by using specially crafted requests...
The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the lack of protective measures for the website structure, allowing attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malicious link...
Microsoft Dynamics 365 Remote Code Execution Vulnerability
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations. The product includes financial management, production management and business intelligence management. A remote code execution vulnerability exists in Microsoft Dynamics 365, which can be exploited by an...
Security Updates for Microsoft Dynamics 365 (on-premises) (November 2021)
The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-42316 %NASLMINLEVEL...