Vulnerabilities

TI-2022-07399 CVE-2022-23274 · GHSA-26cp-j78f-2568

Microsoft Dynamics GP Remote Code Execution Vulnerability

MEDIUM 42

Microsoft Dynamics GP Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02145 Published 2022-02-09 Fixed in 18.4.1434

TI-2022-07398 CVE-2022-23273 · GHSA-rj3q-w987-rh94

Microsoft Dynamics GP Elevation Of Privilege Vulnerability

MEDIUM 42

Microsoft Dynamics GP Elevation Of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.022 Published 2022-02-09 Fixed in 18.4.1434

TI-2022-07397 CVE-2022-23272 · GHSA-6929-2rrj-qg4c

Microsoft Dynamics GP Elevation Of Privilege Vulnerability

MEDIUM 43

Microsoft Dynamics GP Elevation Of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0255 Published 2022-02-09 Fixed in 18.4.1434

TI-2022-07396 CVE-2022-23271 · GHSA-c7h9-7hmq-v389

Microsoft Dynamics GP Elevation Of Privilege Vulnerability

MEDIUM 45

Microsoft Dynamics GP Elevation Of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03755 Published 2022-02-09 Fixed in 18.4.1434

TI-2022-07394 CVE-2022-23269 · GHSA-4m96-r76q-68qp

Microsoft Dynamics GP Spoofing Vulnerability

LOW 27

Microsoft Dynamics GP Spoofing Vulnerability

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01164 Published 2022-02-09 Fixed in 18.4.1434

TI-2010-01995 CVE-2010-2083 · GHSA-jfcm-mvvp-g4g7

Microsoft Dynamics GP has a default value of ACCESS for the system password, which might…

LOW 30

Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.08494 Published 2010-05-26 No fix listed CWE-255

TI-2010-01927 CVE-2010-2011 · GHSA-j9fh-4mc8-rjqx

Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and…

LOW 32

Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain sensitive information by decrypting a fie…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.10741 Published 2010-05-21 No fix listed CWE-310

TI-2006-05082 CVE-2006-5266 · GHSA-rxxg-c666-q7v4

Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and…

MEDIUM 49

Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allow remote attackers to execute arbitrary code via (1) a crafted Distributed Process Manager (DPM) message to the (a) DPM compo…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.15695 Published 2008-06-30 No fix listed CWE-119

TI-2006-05081 CVE-2006-5265 · GHSA-gr95-2xhj-gvc5

Unspecified vulnerability in Microsoft Dynamics GP (formerly Great Plains) 9.0 and…

LOW 35

Unspecified vulnerability in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allows remote attackers to cause a denial of service (crash) via an invalid magic number in a Distributed Process Server (DPS) me…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.10419 Published 2008-06-30 No fix listed CWE-20

Vulnerabilities

Filters