Multiple vulnerability in Microsoft Dynamics

Описание

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Dynamics Business Central can be exploited remotely to execute arbitrary code.
2. A cross-site-scripting (XSS) vulnerability Microsoft Dynamics 365 (On-Premise) can be exploited remotely via specially crafted web to spoof user interface.
3. Unspecified Microsoft Dynamics Business can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

• CVE-2020-1022
  CVE-2020-1050
  CVE-2020-1049
  CVE-2020-1018
  

Связанные продукты

• Microsoft-Dynamics-365

Список CVE

• CVE-2020-1022
  high
• CVE-2020-1050
  warning
• CVE-2020-1049
  warning
• CVE-2020-1018
  warning

Список KB

• 4538593
• 4549673
• 4557700
• 4557699
• 4549676
• 4549674
• 4549678
• 4549675
• 4549677

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com