1335 matches found
CVE-2025-49745
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-53728 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
...
CVE-2025-53728
CVE-2025-53728 affects Microsoft Dynamics 365 (on-premises) (version 9.1) with an information disclosure vulnerability that allows an unauthenticated network attacker to obtain sensitive data. The root cause is exposure of information to an unauthorized actor over a network. Microsoft has release...
CVE-2025-53728 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
...
CVE-2025-49745 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
CVE-2025-49745
CVE-2025-49745 affects Microsoft Dynamics 365 (on-premises) (version 9.1). It is a cross-site scripting vulnerability caused by improper neutralization of input during web page generation, enabling an attacker to spoof the user interface over a network. The vulnerability requires user interaction...
CVE-2025-49745 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
Microsoft Releases Guidance on High-Severity Vulnerability (CVE-2025-53786) in Hybrid Exchange Deployments
Update 08/12/2025: CISA has updated this alert to provide clarification on identifying Exchange Servers on an organization’s networks and provided further guidance on running the Microsoft Exchange Health Checker. Update 08/07/2025: CISA issued Emergency Directive ED 25-02: Mitigate Microsoft...
Service Update 1.38 for Microsoft Dynamics CRM (on-premises) 9.1
None None...
Service Update 1.39 for Microsoft Dynamics CRM (on-premises) 9.1
None None...
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to perform spoofing over a network...
AXIS Device Manger 安全漏洞
AXIS Device Manger is an on-premise tool from Axis Sweden AXIS that provides a simple, cost-effective and secure way to perform device management. AXIS Device Manger has a security vulnerability that stems from insufficient validation of ACAP configuration file inputs, which could lead to the...
KLA86582 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Dynamics 365 on-premises can be...
Microsoft Dynamics 365 跨站脚本漏洞
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. It is used for financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises. An...
PT-2025-32833 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The software contains an issue that allows an unauthorized attacker to disclose sensitive information over a network. Recommendations: At the moment, there is no...
Microsoft Dynamics 365 信息泄露漏洞
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. It is used for financial management, production management and business intelligence management. An information disclosure vulnerability exists in Microsoft Dynamics 365 on-premises. An...
PT-2025-32768 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The software contains an improper neutralization of input during web page generation, leading to a cross-site scripting issue. This allows an unauthorized attacke...
CVE-2025-49745: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-53728: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...