CVE-2020-16978

Microsoft Dynamics 365 (on‑premises) is affected by CVE-2020-16978, a cross‑site scripting (XSS) vulnerability. The issue arises when Dynamics Server does not properly sanitize specially crafted web requests, allowing an authenticated attacker to execute scripts in the context of the current user...

CVE-2020-16956

CVE-2020-16956 is an XSS vulnerability in Microsoft Dynamics 365 (on‑premises) caused by improper sanitization of specially crafted web requests. An authenticated attacker could send crafted requests to an affected Dynamics server, execute scripts in the browser context of the current user, read ...

Heartland Dental’s Ambitions Land Them in the Cloud

Managing security for the largest Dental Support Organization DSO in the United States is no easy task. And sometimes, you need a security services partner to lend a helping hand. We sat down with Heartland Dental to talk about all things security, why they chose Rapid7, how quickly they’re...

Service Update 0.21 for Microsoft Dynamics 365 9.0

Service Update 0.21 for Microsoft Dynamics 365 9.0 INTRODUCTION Service Update 9.0.21 for Microsoft Dynamics CRM on-premises 9.0 is now available. This article describes the hotfixes and updates that are included in Service Update 9.0.21. MORE INFORMATION Update package| Version number ---|---...

Microsoft Dynamics 365 (on-premises) Update 2.23

Microsoft Dynamics 365 on-premises Update 2.23 Introduction Service Update 2.23 for Microsoft Dynamics CRM on-premises 8.2 is now available. This article describes the hotfixes and updates that are included in Service Update 2.23. More information Update package| Version number ---|--- Microsoft...

Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

PT-2020-4392 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: A cross-site scripting issue exists due to improper sanitization of specially crafted web requests. An authenticated attacker could exploit this by sending a...

Security Updates for Microsoft Dynamics 365 (on-premises) (October 2020)

The Microsoft Dynamics 365 on-premises is missing security security updates. It is, therefore, affected by a cross-site scripting vulnerability due to not properly sanitizing specially crafted web requests. An authenticated attacker could exploit the vulnerability by sending a specially crafted...

PT-2020-4388 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: A cross-site scripting issue exists due to improper sanitization of specially crafted web requests. An authenticated attacker could exploit this by sending a...

A Self-Service Password Reset Project Can Be A Quick Win For IT

Since the beginning of this year, organizations' IT staff have faced numerous challenges and an increased workload as a result of the global pandemic and shift to a mainly remote workforce. Supporting end-users that are now working from home has introduced new challenges in troubleshooting since ...

CVE-2020-16862

A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...

CVE-2020-16864

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

CVE-2020-16860

A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...

CVE-2020-16871

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

CVE-2020-16864

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

CVE-2020-16862

A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...

CVE-2020-16861

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

CVE-2020-16872

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...

CVE-2020-16857

A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations on-premises version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server. An authenticated attacke...

CVE-2020-16858

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...