1335 matches found
Microsoft Dynamics 365 (on-premises) Update 2.26
None None...
Microsoft Dynamics 365 Information Disclosure Vulnerability
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. An information disclosure vulnerability exists in Microsoft Dynamics 365. The...
CVE-2021-25237
An improper access control vulnerability in Trend Micro Apex One on-prem could allow an unauthenticated user to obtain information about the managing port used by agents...
Input validation
IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation. IBM X-Force ID: 186282...
Cross site scripting
IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2020-4667
IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation. IBM X-Force ID: 186282...
CVE-2020-4667
CVE-2020-4667 affects IBM Engineering Requirements Quality Assistant On-Premises. An authenticated user could obtain sensitive information due to improper input validation. The NVD entry lists a MEDIUM severity (CVSS v3.1 base score 4.3) with network attack vector, low privileges required, and no...
CVE-2020-4666
CVE-2020-4666 affects IBM Engineering Requirements Quality Assistant On-Premises. The vulnerability is a cross-site scripting flaw in the Web UI that could let an attacker embed arbitrary JavaScript in the UI, potentially altering functionality and disclosing credentials within a trusted session....
CVE-2020-4664
IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2020-4664
CVE-2020-4664 affects IBM Engineering Requirements Quality Assistant On-Premises. The issue is a cross-site scripting vulnerability that allows embedding arbitrary JavaScript in the Web UI, potentially leading to credential disclosure within a trusted session. Connected sources confirm this is ti...
CVE-2020-4663
CVE-2020-4663 affects IBM Engineering Requirements Quality Assistant On-Premises and describes a cross-site scripting (XSS) vulnerability in the Web UI that could allow embedding arbitrary JavaScript and potentially disclose credentials within a trusted session. The primary impact, as stated, is ...
PT-2021-12150
Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to...
CVE-2020-4667: Improper Input Validation
IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation. IBM X-Force ID: 186282...
CVE-2020-4666: Improper Neutralization of Input During Web Page Generation
IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2020-4664: Improper Neutralization of Input During Web Page Generation
IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2020-4663: Improper Neutralization of Input During Web Page Generation
IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2020-4664
IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2020-4667
IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation. IBM X-Force ID: 186282...
Advice for incident responders on recovery from systemic identity compromises
As Microsoft alongside our industry partners and the security community continues to investigate the extent of the Solorigate attack, our goal is to provide the latest threat intelligence including IOCs and guidance across our products and solutions to help the community fight back against, harde...
