1140 matches found
CVE-2020-17006
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2020-17021
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2020-17018
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2020-17021
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2020-17005
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Cross site scripting
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
Microsoft Dynamics 365 (on-premises) Update 2.24
None None...
Service Update 0.22 for Microsoft Dynamics 365 9.0
None None...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
PT-2020-4769 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365, which can be exploited by a remote attacker to perform a...
PT-2020-4708 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to conduct cross-site scripting XSS...
PT-2020-4803 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to the failure to protect the web page structure in Microsoft Dynamics 365, allowing for potential cross-site scripting attacks. An attacker...
PT-2020-4802 · Microsoft · Dynamics 365
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365, which can be exploited for cross-site scripting attacks. This...
Security Updates for Microsoft Dynamics 365 (on-premises) (November 2020)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities. An authenticated, remote attacker could exploit this, by sending a specially crafted request to an affected Dynamics server. The attacker who...
CVE-2020-12145
Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+ uses HTTP headers to authenticate REST API calls from localhost. This makes it possible to log in to Orchestrator by introducing an HTTP HOST header set to 127.0.0.1 or localhost. Orchestrator instances that are hosted ...
Exploit for Improper Authentication in Microsoft
ecpslap This proof-of-concept for CVE-2020-0688https://vul...
Security Bulletin: Multiple security vulnerabilities in WebSphere Application Server affect Predictive Maintenance and Quality and Predictive Maintenance Insights
Summary IBM WebSphere Application Server is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. Vulnerabilities have been identified in WebSphere Application Server and the information about their fixes are published in security bulletins...
CVE-2020-16956
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...
CVE-2020-16956
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...