795 matches found
CVE-2020-16862
A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...
CVE-2020-16858
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...
Remote code execution
A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...
Cross site scripting
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...
Cross site scripting
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...
Remote code execution
A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations on-premises version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server. An authenticated attacke...
Cross site scripting
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...
Cross site scripting
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...
Remote code execution
A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...
Cross site scripting
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...
Cross site scripting
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...
CVE-2020-16878
Summary of CVE-2020-16878 : A cross-site scripting vulnerability affects Microsoft Dynamics 365 (on-premises) where a specially crafted web request is not properly sanitized. An authenticated attacker could exploit this by sending such a request to an affected Dynamics server, enabling XSS that r...
CVE-2020-16878 Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
...
CVE-2020-16872 Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
...
CVE-2020-16872
CVE-2020-16872 is a cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises). An authenticated attacker could send a specially crafted web request to an affected Dynamics server, triggering XSS and executing script in the security context of the currently authenticated user. Imp...
CVE-2020-16864
CVE-2020-16864 is a cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises). The root cause is insufficient sanitization of specially crafted web requests to the Dynamics server, enabling an authenticated attacker to run scripts in the browser in the context of the current user...
CVE-2020-16862 Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability
...
CVE-2020-16862
CVE-2020-16862 is a remote code execution vulnerability in Microsoft Dynamics 365 (on-premises). The issue arises when the Dynamics server fails to properly sanitize and validate web requests, allowing an authenticated attacker to exploit a crafted request and execute arbitrary code in the contex...
