Skip to content
OpenAdvisories
High · 7.1 CVE-2020-16857 EUVD-2020-8815GHSA-55f5-7786-m5m5

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

Published Sep 11, 2020 · Updated Aug 4, 2024 · Assigned by microsoft

Description

<p>A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server.</p>
<p>An authenticated attacker with privileges to import and export data could exploit this vulnerability by sending a specially crafted file to a vulnerable Dynamics server.</p>
<p>The security update addresses the vulnerability by correcting how Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11 handles user input.</p>

Affected products

VendorProductAffectedFixed
Microsoft Dynamics 365 for Finance and Operations 10.0.0 – < publication publication

References