CVE-2023-35389

CVE-2023-35389 affects Microsoft Dynamics 365 On-Premises (on-premises) with a remote code execution vulnerability. Multiple connected sources confirm this is an On-Premises issue impacting Dynamics 365 on version 9.x, including Business Central/On-Prem deployments, and describe exploit pathways ...

CVE-2023-35389 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

...

PT-2023-4330 · Microsoft · Dynamics 365 On-Premises

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to insufficient input validation in the resource planning component of Microsoft Dynamics 365. This can allow a remote attacker to execute...

CVE-2023-35389: Improper Restriction of XML External Entity Reference

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

Microsoft Dynamics 365 安全漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A remote code execution vulnerability exists in Microsoft Dynamics 365 On-Premises...

PT-2023-26709 · 42Gears · Suremdm

Name of the Vulnerable Software and Affected Versions: SureMDM On-premise versions 6.31 and below Description: The issue allows for username enumeration through bypassing CAPTCHA in the On-premise SureMDM Solution on Windows deployment. This enables an attacker to enumerate local user information...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 3

Package name: xms10.15.0.10327.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10220.bin and xms10.15.0.10125.bin Date: July 2023 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this...

CVE-2023-35335

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-33171

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Cross site scripting

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

CVE-2023-33171

Microsoft Dynamics 365 (on-premises) contains CVE-2023-33171, a cross-site scripting vulnerability in its web interface. The NVD entry lists CVSS: base 6.1 (Network, Low attack complexity, No privileges, User interaction required, Confidentiality Low, Integrity Low, Availability None) with a prac...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Microsoft Dynamics 365 跨站脚本漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

PT-2023-3939 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to conduct a cross-site scripting XS...

Vulnerabilities fixed in Microsoft Dynamics

Microsoft has fixed vulnerabilities in Dynamics 365 on prem. A malicious party could exploit the vulnerabilities to launch a Cross-site scripting attack. Such an attack can lead to execution of arbitrary code in the context of the victim's browser, or access to sensitive data in the context of th...

PT-2023-3940 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to conduct a cross-site scripting XS...

CVE-2023-33171: Improper Neutralization of Input During Web Page Generation

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

Microsoft Dynamics 365 跨站脚本漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...