High WID-SEC-2024-1341 3 CVEs

Microsoft Dynamics 365: Mehrere Schwachstellen

Published Jun 11, 2024 · Updated Jun 11, 2024 · de-DE

Vendor: Microsoft Product: Dynamics 365 Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Dynamics 365 ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen oder Informationen offenzulegen.

Product

Microsoft Dynamics 365 ist eine All-in-One-Unternehmensmanagementlösung.

Vulnerabilities 3

High 8.8

CVE-2024-35249

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

Microsoft Microsoft Dynamics 365 Business Central 2023 Release Wave 1 Microsoft Dynamics 365 Business Central 2023 Release Wave 2 Microsoft Dynamics 365 Business Central 2024 Release Wave 1

Jun 11, 2024
High 7.3

CVE-2024-35248

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Microsoft Microsoft Dynamics 365 Business Central 2023 Release Wave 1 Microsoft Dynamics 365 Business Central 2023 Release Wave 2 Microsoft Dynamics 365 Business Central 2024 Release Wave 1

Jun 11, 2024
Medium 5.7

CVE-2024-35263

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.1

Jun 11, 2024

Revision history

2024-06-11 #1
Initiale Fassung

References

Microsoft Leitfaden für Sicherheitsupdates vom 2024-06-11
https://msrc.microsoft.com/update-guide