CVE-2022-23269

CVE-2022-23269 is a Microsoft Dynamics GP spoofing vulnerability. Connected PT-Security notes the flaw affects Microsoft Dynamics GP with UI representation errors enabling remote spoofing, but does not specify affected versions. Kaspersky KLA lists it among Microsoft Dynamics GP issues and recomm...

CVE-2022-23274

CVE-2022-23274 affects Microsoft Dynamics GP with a remote code execution vulnerability. Kaspersky attributes the issue to incorrect code generation management in Microsoft Dynamics GP, enabling remote execution by an attacker. Affected versions are not specified in the provided materials; no exp...

CVE-2022-23272

CVE-2022-23272 maps to Microsoft Dynamics GP Elevation of Privilege Vulnerability. Affected product is Microsoft Dynamics GP; CVSSv3 base score listed as HIGH (8.8) with an exploit vector of network, low attack complexity, and low privileges required. The published description in the connected so...

CVE-2022-23271

CVE-2022-23271 affects Microsoft Dynamics GP with an Elevation of Privilege vulnerability caused by insecure privilege management in Microsoft Dynamics GP. Public materials identify affected product as Microsoft Dynamics GP and note privilege escalation as the impact; remediation guidance points ...

CVE-2022-23273

CVE-2022-23273 is a Microsoft Dynamics GP Elevation of Privilege vulnerability. Multiple connected sources attribute a flaw in Microsoft Dynamics GP related to insecure privilege management, enabling a remote attacker to escalate privileges within GP. The affected product is Microsoft Dynamics GP...

CVE-2010-2083

CVE-2010-2083 involves Microsoft Dynamics GP where the system password has a default value of ACCESS. The connected sources confirm this as a design/configuration issue that could allow remote authenticated users to bypass access restrictions via unspecified vectors. The documents do not specify ...

CVE-2010-2011

Microsoft Dynamics GP is affected by CVE-2010-2011, where a substitution cipher used to encrypt the system password field (and unspecified other fields) can allow remote authenticated users to decrypt content and obtain sensitive information. The vulnerability stems from weak/encryption method us...

CVE-2006-5265

CVE-2006-5265 affects Microsoft Dynamics GP (Great Plains) 9.0 and earlier. The vulnerability lies in the Distributed Process Server (DPS) (and DPS messages) where an invalid magic number in a DPS message can cause a crash (DoS). Threats described in connected documents also include DPS overflow ...

CVE-2006-5266

Microsoft Dynamics GP (Great Plains) versions up to 9.0 are affected by multiple buffer-overflow vulnerabilities in DPS/DPM components. Exploitation possible via crafted DPS/DPM messages: long strings, long IPs, or invalid magic numbers, leading to remote code execution with partial impact on con...