Remote code execution

Microsoft Dynamics CRM on-premises Remote Code Execution Vulnerability...

Remote code execution

Microsoft Dynamics CRM on-premises Remote Code Execution Vulnerability...

CVE-2022-35805

CVE-2022-35805 affects Microsoft Dynamics CRM (on-premises). An authenticated attacker can abuse a trusted solution package to execute arbitrary SQL commands, enabling escalation and execution of commands as the db_owner within the Dynamics 365 database (remote code execution). Public sources des...

CVE-2022-34700

CVE-2022-34700 is a Microsoft Dynamics CRM (on-premises) RCE vulnerability. An authenticated user could apply a crafted trusted solution package to execute arbitrary SQL commands, potentially escalating to db_owner on the Dynamics 365 database. The CVSS 3.1 base score is 8.8 (HIGH) with network a...

Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability

...

PT-2022-5867 · Microsoft · Dynamics Crm

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics CRM on-premises affected versions not specified Description: The issue is related to a lack of protection in the SQL query structure of Microsoft Dynamics CRM, which can be exploited by a remote attacker using specially...

PT-2022-5866 · Microsoft · Dynamics Crm

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics CRM on-premises affected versions not specified Description: The issue is related to a lack of protection for the SQL query structure in Microsoft Dynamics CRM, allowing for potential remote code execution by an attacker...

CVE-2022-35805: Undefined Security Weakness

Microsoft Dynamics CRM on-premises Remote Code Execution Vulnerability...

CVE-2022-34700: Improper Neutralization of Special Elements used in an SQL Command

Microsoft Dynamics CRM on-premises Remote Code Execution Vulnerability...

Citrix Endpoint Management (aka XenMobile Server) 10.13.0 Rolling Patch 10

Package name: xms10.13.0.11025.bin For: XenMobile Server 10.13.0 Deployment type: On-premises only Replaces: xms10.13.0.10922.bin, xms10.13.0.10817.bin, xms10.13.0.10723.bin, xms10.13.0.10603, xms10.13.0.10528.bin, xms10.13.0.10426.bin, xms10.13.0.10329.bin, xms10.13.0.10212.bin, and...

Moderate: Red Hat Security Advisory: RHSA: Submariner 0.13 - security and enhancement update

Submariner 0.13 packages that fix security issues and bugs, as well as adds various enhancements that are now available for Red Hat Advanced Cluster Management for Kubernetes version 2.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerabilit...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 7

Package name: xms10.14.0.10742.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10628.bin,xms10.14.0.10521.bin, xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin. Date: August 2022 Languages supported: English US...

CVE-2022-29071

This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal CVP where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vulnerability is that the CVP user login passwords...

Race condition

This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal CVP where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vulnerability is that the CVP user login passwords...

CVE-2022-29071 This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vu ...

This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal CVP where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vulnerability is that the CVP user login passwords...

PT-2022-19399 · Arista · Arista Cloudvision Portal

Name of the Vulnerable Software and Affected Versions: Arista CloudVision Portal CVP affected versions not specified Description: The issue concerns a vulnerability in the on-premises deployment model of Arista CloudVision Portal CVP where, under specific conditions, user passwords can be leaked ...

Active Exploitation of Atlassian’s Questions for Confluence App CVE-2022-26138

Exploitation is underway for one of the trio of critical Atlassian vulnerabilities that were published last week affecting several the company’s on-premises products. Atlassian has been a focus for attackers, as it was less than two months ago that we observed exploitation of CVE-2022-26134 in...

CVE-2022-29071

This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal CVP where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vulnerability is that the CVP user login passwords...

IBM Engineering Requirements Quality Assistant Input Validation Error Vulnerability

IBM Engineering Requirements Quality Assistant is a Watson AI-based software from IBM USA used to assist developers in improving the quality of engineering requirements. The application significantly reduces the cost of finding defects, facilitates early detection of requirements errors in the...

PT-2022-16457 · Pegasystems · Pega Platform

Name of the Vulnerable Software and Affected Versions: Pega Platform affected versions not specified Description: The issue arises when an on-premise installation of the Pega Platform has the JMX interface port exposed to the Internet without proper port filtering configuration. This could allow...