Spoofing

Microsoft Dynamics GP Spoofing Vulnerability...

Privilege escalation

Microsoft Dynamics GP Elevation Of Privilege Vulnerability...

Remote code execution

Microsoft Dynamics GP Remote Code Execution Vulnerability...

CVE-2022-23274 Microsoft Dynamics GP Remote Code Execution Vulnerability

...

CVE-2022-23274

CVE-2022-23274 affects Microsoft Dynamics GP with a remote code execution vulnerability. Kaspersky attributes the issue to incorrect code generation management in Microsoft Dynamics GP, enabling remote execution by an attacker. Affected versions are not specified in the provided materials; no exp...

CVE-2022-23273

CVE-2022-23273 is a Microsoft Dynamics GP Elevation of Privilege vulnerability. Multiple connected sources attribute a flaw in Microsoft Dynamics GP related to insecure privilege management, enabling a remote attacker to escalate privileges within GP. The affected product is Microsoft Dynamics GP...

CVE-2022-23273 Microsoft Dynamics GP Elevation Of Privilege Vulnerability

...

CVE-2022-23272

CVE-2022-23272 maps to Microsoft Dynamics GP Elevation of Privilege Vulnerability. Affected product is Microsoft Dynamics GP; CVSSv3 base score listed as HIGH (8.8) with an exploit vector of network, low attack complexity, and low privileges required. The published description in the connected so...

CVE-2022-23272 Microsoft Dynamics GP Elevation Of Privilege Vulnerability

...

CVE-2022-23271

CVE-2022-23271 affects Microsoft Dynamics GP with an Elevation of Privilege vulnerability caused by insecure privilege management in Microsoft Dynamics GP. Public materials identify affected product as Microsoft Dynamics GP and note privilege escalation as the impact; remediation guidance points ...

CVE-2022-23271 Microsoft Dynamics GP Elevation Of Privilege Vulnerability

...

CVE-2022-23269

CVE-2022-23269 is a Microsoft Dynamics GP spoofing vulnerability. Connected PT-Security notes the flaw affects Microsoft Dynamics GP with UI representation errors enabling remote spoofing, but does not specify affected versions. Kaspersky KLA lists it among Microsoft Dynamics GP issues and recomm...

CVE-2022-23269 Microsoft Dynamics GP Spoofing Vulnerability

...

KLA12452 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Dynamics GP can be...

PT-2022-1676 · Microsoft · Dynamics Gp

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics GP affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Dynamics GP, which can lead to spoofing attacks. An attacker, acting...

PT-2022-1707 · Microsoft · Dynamics Gp

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics GP affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Dynamics GP, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At th...

CVE-2010-2083

Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors...

Design/Logic Flaw

Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors...

CVE-2010-2083

CVE-2010-2083 involves Microsoft Dynamics GP where the system password has a default value of ACCESS. The connected sources confirm this as a design/configuration issue that could allow remote authenticated users to bypass access restrictions via unspecified vectors. The documents do not specify ...

CVE-2010-2083

Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors...