Lucene search
+L

796 matches found

Microsoft KB
Microsoft KB
added 2020/08/11 7:00 a.m.31 views

Service Update 0.15 for Microsoft Dynamics 365 9.0

None None...

5.4CVSS6.6AI score0.01507EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:00 a.m.8 views

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the lack of measures taken to protect the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS7.2AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:00 a.m.7 views

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the lack of measures taken to protect the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS7.2AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:00 a.m.9 views

The vulnerability of the Microsoft Dynamics 365 customer relationship management system, related to the lack of measures taken to protect the website structure, allows a hacker to perform a cross-site scripting attack.

The vulnerability of the Microsoft Dynamics 365 customer relationship management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS6.2AI score0.01489EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/06/12 12:00 a.m.37 views

Security Updates for Microsoft Dynamics 365 (on-premises) (April 2020 OOB)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A cross-site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics...

5.4CVSS6.5AI score0.01507EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2020/06/09 7:00 a.m.27 views

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

5.4AI score
SaveExploits0
NVD
NVD
added 2020/05/21 11:15 p.m.43 views

CVE-2020-1063

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

5.4CVSS5AI score0.01489EPSS
SaveExploits0References2
Prion
Prion
added 2020/05/21 11:15 p.m.25 views

Cross site scripting

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...

3.5CVSS5AI score0.01489EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/05/21 10:52 p.m.98 views

CVE-2020-1063

CVE-2020-1063 is an authenticated-cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises). The Red Hat and Microsoft advisories corroborate that an attacker with valid authentication could exploit specially crafted web requests to run script in the user’s browser, reading or al...

5.4CVSS5.3AI score0.01489EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/21 12:00 a.m.14 views

The vulnerability of the Microsoft Dynamics 365 resource planning software server allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software server is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by using specially crafted requests...

6.1CVSS6.2AI score0.01791EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/21 12:00 a.m.12 views

The vulnerability of the Microsoft Dynamics 365 resource planning software server allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software server is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by using specially crafted requests...

5.4CVSS6.2AI score0.01475EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:00 a.m.11 views

The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV lies in the improper elimination of certain elements in the output data used by the incoming component, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV is related to incorrect elimination of special elements in the output data used by the incoming component. Exploitation of this vulnerability can allow...

8.5CVSS7.9AI score0.06831EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:00 a.m.14 views

The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access...

7.8CVSS7.2AI score0.06158EPSS
SaveExploits0References2Affected Software1
Microsoft KB
Microsoft KB
added 2020/05/12 2:00 p.m.43 views

Service Update 0.16 for Microsoft Dynamics 365 9.0

Service Update 0.16 for Microsoft Dynamics 365 9.0 INTRODUCTION Service Update 9.0.16 for Microsoft Dynamics CRM on-premises 9.0 is now available. This article describes the hotfixes and updates that are included in Service Update 9.0.16. MORE INFORMATION Update package| Version number ---|---...

5.4CVSS5.7AI score0.01489EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/05/12 2:00 p.m.38 views

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

5.4CVSS1.1AI score0.01489EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2020/05/12 12:00 a.m.46 views

KLA11775 XSS vulnerability in Microsoft Dynamics

XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2020-1063 Related products Microsoft-Dynamics-365 CVE list CVE-2020-1063 warning KB list 4552002 4551998 Solution Install necessary updates from the K...

5.4CVSS6AI score0.01489EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2020/05/12 12:00 a.m.33 views

Security Updates for Microsoft Dynamics 365 (on-premises) (May 2020)

The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by the following vulnerabilities : - A cross-site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynami...

5.4CVSS6.4AI score0.01489EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2020/05/11 12:00 a.m.99 views

Security Updates for Microsoft Dynamics 365 Business Central (Mar 2020)

The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by a remote code execution vulnerability due to an issue with the Role-Tailored Client. An authenticated, remote attacker can exploit this to execute arbitrary commands or elevate...

8CVSS8.5AI score0.10838EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2020/05/08 12:00 a.m.67 views

Security Updates for Microsoft Dynamics 365 Business Central (Apr 2020)

The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by a the following vulnerabilities : - An information disclosure vulnerability exists in Business Central due to the application not properly hiding the value of a masked field when showin...

8CVSS8.5AI score0.06831EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2020/05/05 12:00 a.m.9 views

Microsoft Dynamics 365 Business Central Server Installed (Windows)

Binary data microsoftdynamics365businesscentralserverwininstalled.nbin...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder