Lucene search
+L

1140 matches found

Cvelist
Cvelist
added 2021/01/08 2:45 p.m.27 views

CVE-2020-4664

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS5.2AI score0.00554EPSS
SaveExploits0References2
CVE
CVE
added 2021/01/08 2:45 p.m.50 views

CVE-2020-4664

CVE-2020-4664 affects IBM Engineering Requirements Quality Assistant On-Premises. The issue is a cross-site scripting vulnerability that allows embedding arbitrary JavaScript in the Web UI, potentially leading to credential disclosure within a trusted session. Connected sources confirm this is ti...

5.4CVSS5.5AI score0.00554EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/01/08 2:45 p.m.56 views

CVE-2020-4666

CVE-2020-4666 affects IBM Engineering Requirements Quality Assistant On-Premises. The vulnerability is a cross-site scripting flaw in the Web UI that could let an attacker embed arbitrary JavaScript in the UI, potentially altering functionality and disclosing credentials within a trusted session....

5.4CVSS5.5AI score0.00554EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/01/08 2:45 p.m.51 views

CVE-2020-4663

CVE-2020-4663 affects IBM Engineering Requirements Quality Assistant On-Premises and describes a cross-site scripting (XSS) vulnerability in the Web UI that could allow embedding arbitrary JavaScript and potentially disclose credentials within a trusted session. The primary impact, as stated, is ...

5.4CVSS5.5AI score0.00554EPSS
SaveExploits0References2Affected Software1
Microsoft Secure
Microsoft Secure
added 2020/12/21 10:3 p.m.49 views

Advice for incident responders on recovery from systemic identity compromises

As Microsoft alongside our industry partners and the security community continues to investigate the extent of the Solorigate attack, our goal is to provide the latest threat intelligence including IOCs and guidance across our products and solutions to help the community fight back against, harde...

0.4AI score
SaveExploits0
OSV
OSV
added 2020/12/10 12:15 a.m.8 views

CVE-2020-17152

Microsoft Dynamics 365 for Finance and Operations on-premises Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.02749EPSS
SaveExploits0References2
OSV
OSV
added 2020/12/10 12:15 a.m.8 views

CVE-2020-17158

Microsoft Dynamics 365 for Finance and Operations on-premises Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.02749EPSS
SaveExploits0References2
Prion
Prion
added 2020/12/10 12:15 a.m.27 views

Remote code execution

Microsoft Dynamics 365 for Finance and Operations on-premises Remote Code Execution Vulnerability...

6.5CVSS8.8AI score0.02749EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/09 11:36 p.m.42 views

CVE-2020-17152 Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

...

8.8CVSS8.8AI score0.02749EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/12/09 12:0 a.m.59 views

Security Updates for Microsoft Dynamics 365 (on-premises) (December 2020)

The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An attacker can exploit this by convincing a user to click a specially crafte...

8.7CVSS8.2AI score0.01298EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
added 2020/12/08 8:0 a.m.44 views

Service Update 0.23 for Microsoft Dynamics 365 9.0

None None...

8.7CVSS6.6AI score0.01298EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/12/08 8:0 a.m.33 views

Microsoft Dynamics 365 (on-premises) Update 2.25

None None...

8.7CVSS6.6AI score0.01298EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/12/08 8:0 a.m.46 views

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

...

8.8CVSS8.9AI score0.02749EPSS
SaveExploits0
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.14 views

Microsoft Dynamics 365 Cross-Site Scripting Vulnerability

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365. The followi...

8.7CVSS7.1AI score0.01298EPSS
SaveExploits0References3
Rapid7 Blog
Rapid7 Blog
added 2020/12/02 5:23 p.m.77 views

Threat and Vulnerability Management Best Practices

Today’s business world is increasingly driven by e-commerce and the cloud, which means it requires a proactive approach toward vulnerability management. After all, your company’s data—as well as your customers’—remains at risk to cybercriminals, which places the onus on you to protect your...

7.2AI score
SaveExploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2020/12/02 5:0 p.m.50 views

Protect your SQL Server on-premises, in Azure, and in multicloud

Azure Defender for SQL is now generally available for use with SQL Server on premises, in multicloud deployments on Amazon Web Services AWS, and Google Cloud Platform GCP, and in virtual machines on Azure. Azure Defender for SQL constantly monitors your SQL Server for known vulnerabilities and...

SaveExploits0
Citrix
Citrix
added 2020/11/20 12:0 a.m.12 views

Citrix Endpoint Management (aka XenMobile Server) 10.10.0 Rolling Patch 6

Package name:xms10.10.0.10607.bin For: XenMobile Server 10.10.0 Deployment type: On-premises only Replaces:xms10.10.0.10502.bin, xms10.10.0.10403.bin, xms10.10.0.10305.bin, xms10.10.0.10202.bin, and xms10.10.0.10103.bin Date:July, 2020 Languages supported:English US Readme version:1.00 Readme...

6.3AI score
SaveExploits0
Citrix
Citrix
added 2020/11/20 12:0 a.m.10 views

Citrix Endpoint Management (aka XenMobile Server) 10.9.0 Rolling Patch 5

Package name:xms10.9.0.10507.bin For: XenMobile Server 10.9.0 Deployment type: On-premises only Replaces:xms10.9.0.10405.bin, xms10.9.0.10303.bin, xms10.9.0.10204.bin, xms10.9.0.10105.bin Date:July, 2020 Languages supported:English US Readme version:1.00 Readme Revision History Version| Date|...

7AI score
SaveExploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2020/11/19 7:0 p.m.46 views

Modernize secure access for your on-premises resources with Zero Trust

Change came quickly in 2020. More likely than not, a big chunk of your workforce has been forced into remote access. And with remote work came an explosion of bring-your-own-device BYOD scenarios, requiring your organization to extend the bounds of your network to include the entire internet and...

7.8AI score
SaveExploits0
NVD
NVD
added 2020/11/11 7:15 a.m.29 views

CVE-2020-17006

Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...

5.4CVSS5.3AI score0.01432EPSS
SaveExploits0References1
Rows per page
Query Builder