Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:dynamics_365:-:*:*:*:commerce:*:*:*

part: a version: - update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductDynamics 365 (4a10079b-b313-5018-b658-ff0b0ab6b397)
Edition*
Language*
Software editioncommerce
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-16943 vulnerable 2026-06-08 05:20:54.850833 Dynamics 365 Commerce Elevation of Privilege Vulnerability
MEDIUM (6.5)
<p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who successfully exploited this vulnerability could update data without proper authorization.</p> <p>To exploit the vulnerability, an attacker would need to send a specially crafted request to an affected server.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Dynamics 365 Commerce performs authorization checks.</p>
Published: 2020-10-16T22:17:59.000Z
Updated: 2024-11-15T16:57:21.639Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.