7.1
Élevée
CVE-2020-16857 A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises)…
Description
<p>A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server.</p> <p>An authenticated attacker with privileges to import and export data could exploit this vulnerability by sending a specially crafted file to a vulnerable Dynamics server.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11 handles user input.</p>
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dynamics 365 for Finance and Operations 10.0 | 10.0.0 → dernières | Pas de correctif indiqué |
Références
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Dynamics 365 for Finance and Operations
Les 8 CVE de Dynamics 365 for Finance and Operations →
CVE-2023-35621
Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability
7.5
Élevée
CVE-2023-36800
Dynamics Finance and Operations Cross-site Scripting Vulnerability
7.6
Élevée
CVE-2023-24896
Dynamics 365 Finance Spoofing Vulnerability
5.4
Moyenne
CVE-2021-28461
Dynamics Finance and Operations Cross-site Scripting Vulnerability
6.1
Moyenne