CVE-2022-23259

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

CVE-2022-23259

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

Remote code execution

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

CVE-2022-23259

CVE-2022-23259 is a remote code execution vulnerability in Microsoft Dynamics 365 On-Premises. The affected product area is Dynamics 365 (on-premises) and the underlying issue enables an attacker over a network to execute arbitrary code with user-authorized privileges; authenticated access is req...

CVE-2022-22189

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration CSO allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects:...

Design/Logic Flaw

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration CSO allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects:...

CVE-2022-22189

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration CSO allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects:...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

...

KLA12510 Spoofing vulnerability in Microsoft SQL Server

A spoofing vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2022-23292 Related products Microsoft-Power-BI CVE list CVE-2022-23292 warning KB list Solution Install necessary updates from the KB section...

PT-2022-2665 · Microsoft · Dynamics 365 On-Premises

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Dynamics 365. Exploitation of this issue may allow an attacker to execute arbitrary code...

Microsoft Dynamics 365 输入验证错误漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational companies from Microsoft Corporation USA. A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises, which includes financial management, production management, and business intelligence management...

Citrix Endpoint Management (aka XenMobile Server) 10.13.0 Rolling Patch 8

Package name: xms10.13.0.10817.bin For: XenMobile Server 10.13.0 Deployment type: On-premises only zReplaces: xms10.13.0.10723.bin, xms10.13.0.10603.bin, xms10.13.0.10528.bin, xms10.13.0.10426.bin, xms10.13.0.10329.bin, xms10.13.0.10212.bin, and xms10.13.0.10129.bin. Date: April 2022 Languages...

On-Premises Servers Products are Here! Introducing the Applications and On-Premises Servers Bug Bounty Program

Microsoft is excited to announce the addition of Exchange on-premises, SharePoint on-premises, and Skype for Business on-premises to the Applications and On-Premises Servers Bounty Program. Through this expanded program, we encourage researchers to discover and report high-impact security...

On-Premises Servers Products are Here! Introducing the Applications and On-Premises Servers Bug Bounty Program

Microsoft is excited to announce the addition of Exchange on-premises, SharePoint on-premises, and Skype for Business on-premises to the Applications and On-Premises Servers Bounty Program. Through this expanded program, we encourage researchers to discover and report high-impact security...

On-Premises Servers Products are Here! Introducing the Applications and On-Premises Servers Bug Bounty Program

Microsoft is excited to announce the addition of Exchange on-premises, SharePoint on-premises, and Skype for Business on-premises to the Applications and On-Premises Servers Bounty Program. Through this expanded program, we encourage researchers to discover and report high-impact security...

Security Bulletin: Security vulnerability in WebSphere Application Server shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-23450)

Summary IBM WebSphere Application Server is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. IBM WebSphere Application Server is vulnerable to remote code execution due to Dojo CVE-2021-23450. Vulnerability Details Refer to the security bulletin...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 5

Package name: xms10.14.0.10521.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin Date: March 2022 Languages supported: English US Important notes about this update As a best...

Security Bulletin: Multiple security vulnerabilities may affect IBM DB2 shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-38931,CVE-2021-20373)

Summary IBM DB2 is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. Information about security vulnerabilities affecting DB2 has been published in multiple security bulletins as below. The recommended solution is to upgrade to Fix Pack version...

Security Bulletin: Security vulnerability in WebSphere Application Server shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-20517)

Summary IBM WebSphere Application Server ND shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises is vulnerable to a Directory Traversal vulnerability. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

Security Bulletin: Security vulnerability in WebSphere Application Server shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-29736)

Summary IBM WebSphere Application Server is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. WebSphere Application Server is vulnerable to a Privilege Escalation vulnerability. Vulnerability Details Refer to the security bulletins listed in the...