CVE-2019-1375

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...

Cross site scripting

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...

CVE-2019-1375

CVE-2019-1375 affects Microsoft Dynamics 365 (on-premises), specifically version 9.0. The vulnerability is a cross-site scripting (XSS) flaw caused by improper sanitization of specially crafted web requests to the Dynamics server. An authenticated attacker could execute script in the context of t...

Microsoft Dynamics 365 Cross-Site Scripting Vulnerability (CNVD-2019-35573)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability in Microsoft Dynamics 365 on-premises version...

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

CVE-2019-17366 - Citrix Application Delivery Management (ADM) Console Security Update

Description of Problem An authorisation bypass vulnerability was discovered in the Citrix Application Delivery Management ADM server. The vulnerability allows a Citrix ADM user with read-only privilege to access a managed instances with admin level permissions. The following deployment scenarios...

Security Updates for Microsoft Dynamics 365 (on-premises) (October 2019)

The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by the following vulnerability : - A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics...

How Cloud-Based Automation Can Keep Business Operations Secure

The massive data breach at Capital One – America's seventh-largest bank, according to revenue – has challenged many common assumptions about cloud computing for the first time. Ironically, the incident, which exposed some 106 million Capital One customers' accounts, has only reinforced the belief...

Acquiring a VHD to Investigate

In a previous post we described some of the differences between on-premises/physical forensics and cyber investigations and those performed in the cloud, and how this can make cloud forensics challenging. That blog post described a method of creating and maintaining a VM image which can be...

Scalable infrastructure for investigations and incident response

Traditional computer forensics and cyber investigations are as relevant in the cloud as they are in on-premise environments, but the methods in which to access and perform such investigations differ. This post will describe some of the challenges of bringing on-premises forensics techniques to th...

Microsoft Dynamics On-Premise Elevation of Privilege Vulnerability

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. An elevation of privilege vulnerability exists in Microsoft Dynamics 365 on-premis...

Dynamics on-premises elevation of privilege vulnerability: August 13, 2019

Dynamics on-premises elevation of privilege vulnerability: August 13, 2019 Introduction Service Update 0.7 for Microsoft Dynamics CRM on-premises 9.0 is now available. This article describes the hotfixes and updates that are included in Service Update 0.7. Summary An elevation of privilege...

Easy VPN Transition With Zero Trust Access

Akamai recently announced Enterprise Application Access capabilities designed to improve performance and user experience, as well as provide an easy migration away from VPN, reducing complexity and risk. The new capabilities -- IP address-based access, on-premises network detection, and captive...

Customize NetScaler Gateway authentication page to match the modern appearance

This article provides information on customizing the on-premises Citrix Gateway authentication page to use a modern experience. This is recommended when the on-premises Citrix Gateway is used as the identity provider for Citrix Workspace, or when using StoreFront with the modern experience...

Security Update for Microsoft Dynamics 365 (on-premises) (May 2019)

The version of Microsoft Dynamics 365 on-premises installed on the remote Windows host is 7.x 7.0.3.147, 8.x 8.2.6.19, 9.x 9.0.4.5. It is, therefore, affected by a security feature bypass vulnerability. An unauthenticated, remote attacker could exploit this issue, to send attachment types that ar...

CVE-2018-17560

The admin interface of the Grouptime Teamwire Client 1.5.1 prior to 1.9.0 on-premises messenger server allows stored XSS. All backend versions prior to prod-2018-11-13-15-00-42 are affected...

CVE-2018-17560

The admin interface of the Grouptime Teamwire Client 1.5.1 prior to 1.9.0 on-premises messenger server allows stored XSS. All backend versions prior to prod-2018-11-13-15-00-42 are affected...

CVE-2018-17560

The admin interface of the Grouptime Teamwire Client 1.5.1 prior to 1.9.0 on-premises messenger server allows stored XSS. All backend versions prior to prod-2018-11-13-15-00-42 are affected...

CVE-2018-17560

The CVE affects Grouptime Teamwire Client: on-premises server where the admin interface of version 1.5.1 (before 1.9.0) is vulnerable to stored XSS. Public details consistently map the issue to a lack of proper validation of client-side data, enabling cross-site scripting in the admin UI. All bac...

Acunetix Vulnerability Scanner Now With Network Security Scans

User-friendly and competitively priced, Acunetix leads the market in automatic web security testing technology. Its industry-leading crawler fully supports HTML5, JavaScript, and AJAX-heavy websites, enabling the auditing of complex, authenticated applications. Acunetix provides the only technolo...