795 matches found
Cross site scripting
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...
CVE-2020-0656
CVE-2020-0656 describes a cross-site scripting vulnerability in Microsoft Dynamics 365 on-premises (notably Dynamics 365 Field Service on-premises v7 series) caused by improper sanitization of specially crafted web requests. An authenticated attacker could exploit this to perform XSS in the user’...
Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...
Microsoft Dynamics 365 CVE-2020-0656 Cross Site Scripting Vulnerability
Description Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
PT-2020-1325
Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 on-premises affected versions not specified Description A cross-site scripting issue exists due to improper sanitization of specially crafted web requests to the affected Dynamics server. This could allow a remote attack...
The vulnerability of the Dynamics server software for resource planning in Microsoft Dynamics 365 allows a perpetrator to carry out cross-site scripting attacks.
The vulnerability of the Dynamics planning software for Microsoft Dynamics 365 servers relates to insufficient protection of the website structure. Exploitation of this vulnerability could allow a malicious actor to perform cross-site scripting attacks by using specially crafted requests...
Cross site scripting
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...
CVE-2019-1375
CVE-2019-1375 affects Microsoft Dynamics 365 (on-premises), specifically version 9.0. The vulnerability is a cross-site scripting (XSS) flaw caused by improper sanitization of specially crafted web requests to the Dynamics server. An authenticated attacker could execute script in the context of t...
Microsoft Dynamics 365 CVE-2019-1375 Cross Site Scripting Vulnerability
Description Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
Security Updates for Microsoft Dynamics 365 (on-premises) (October 2019)
The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by the following vulnerability : - A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics...
Security Updates for Microsoft Dynamics 365 (on-premises) (August 2019)
The Microsoft Dynamics 365 on-premises install is missing a security update. It is, therefore, affected by the following vulnerability : - An elevation of privilege vulnerability exists in Dynamics On-Premise v9. An attacker who successfully exploited the vulnerability could leverage a customizer...
KLA11532 A PE vulnerability in Microsoft Dynamics 365 On-Premise v9
An elevation of privilege vulnerability in Dynamics On-Premise can be exploited remotely via specially crafted XAML script to gain privileges. Original advisories CVE-2019-1229 Related products Microsoft-Dynamics-365 CVE list CVE-2019-1229 high KB list 4508724 Solution Install necessary updates...
Announcing the Microsoft Dynamics 365 Bounty program
One of Microsoft’s many security investments to protect customers is in the partnerships we build with the external security research community. We are excited to announce the launch of the Dynamics 365 Bounty program and welcome researchers to seek out and disclose any high impact vulnerabilitie...
Security Update for Microsoft Dynamics 365 (on-premises) (May 2019)
The version of Microsoft Dynamics 365 on-premises installed on the remote Windows host is 7.x 7.0.3.147, 8.x 8.2.6.19, 9.x 9.0.4.5. It is, therefore, affected by a security feature bypass vulnerability. An unauthenticated, remote attacker could exploit this issue, to send attachment types that ar...
Description of the security update for the security feature bypass vulnerability in Microsoft Dynamics 365 (on-premises) version 8.2: May 14, 2019
Description of the security update for the security feature bypass vulnerability in Microsoft Dynamics 365 on-premises version 8.2: May 14, 2019 INTRODUCTION Microsoft Dynamics 365 online and on-premises Update 2.6 is now available. This article describes the hotfixes and updates that are include...
Microsoft Dynamics 365 (on-premises) 8.x < 8.2.3.0008 multiple vulnerabilities
The version of Microsoft Dynamics 365 on-premises installed on the remote Windows host is 8.x prior to 8.2.3.0008. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability exists due to an affected server not sanitizing the user input properly. An...
Microsoft Dynamics 365 Detection (Windows)
Binary data microsoftdynamics365detect.nbin...
The vulnerability of the Microsoft Dynamics 365 customer relationship management system, related to inadequate access control, allows a malicious individual to increase their privileges.
The vulnerability of the Microsoft Dynamics 365 customer relationship management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to increase their privileges by sending a specially crafted request to the vulnerable server...
The vulnerability of the Microsoft Dynamics 365 customer relationship management system, related to inadequate access control, allows a malicious individual to increase their privileges.
The vulnerability of the Microsoft Dynamics 365 customer relationship management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to increase their privileges by sending a specially crafted request to the vulnerable server...