Remote code execution

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

CVE-2021-42316 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

...

CVE-2021-42316

CVE-2021-42316 is a Microsoft Dynamics 365 (on-premises) remote code execution vulnerability affecting on-premises deployments, specifically Dynamics 365 (on-premises) versions 9.0 and 9.1. The connected sources confirm an RCE flaw that could allow an attacker to execute arbitrary code on the tar...

Microsoft Dynamics 代码注入漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations. The product includes financial management, production management and business intelligence management. A remote code execution vulnerability exists in Microsoft Dynamics 365, which can be exploited by an...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malicious link...

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to errors in the user interface’s information presentation, allows a perpetrator to carry out spear-phishing attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to errors in information presentation by the user interface. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using specially crafted requests...

Security Updates for Microsoft Dynamics 365 (on-premises) (Oct 2021)

The Microsoft Dynamics 365 on-premises installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A spoofing vulnerability CVE-2021-41353 - A cross-site scripting vulnerability CVE-2021-41354 Note that Nessus has not tested for these...

CVE-2021-41354

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2021-41354

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2021-40457

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...

CVE-2021-40457

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2021-41353

Microsoft Dynamics 365 on-premises Spoofing Vulnerability...

CVE-2021-40457

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...

Cross site scripting

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability...

Spoofing

Microsoft Dynamics 365 on-premises Spoofing Vulnerability...

CVE-2021-41354

CVE-2021-41354 is a Microsoft Dynamics 365 (on-premises) Cross-site Scripting vulnerability. The connected sources confirm the vulnerability affects Dynamics 365 (on-premises) and classify it as a cross-site scripting issue with CVSS 3.1 base score 5.4 (MEDIUM), vector: NETWORK, high-level impact...

CVE-2021-41354 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

CVE-2021-41353 Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability

...

CVE-2021-41353

CVE-2021-41353 affects Microsoft Dynamics 365 (on-premises). Connected sources confirm a spoofing vulnerability in the Dynamics 365 on-premises deployment, with UI/representation issues enabling spoofing. Affected versions referenced by external advisories include Dynamics 365 on‑premises (notabl...