Microsoft dynamics gp vulnerabilities

Latest Microsoft dynamics gp CVEs

Newest publication first

1. CVE-2022-23274 Microsoft Dynamics GP Remote Code Execution Vulnerability

   Published 2022-02-09

   High·CVSS 8.8 EPSS 2.1%

   Microsoft Dynamics GP Remote Code Execution Vulnerability

2. CVE-2022-23273 Microsoft Dynamics GP Elevation Of Privilege Vulnerability

   Published 2022-02-09

   High·CVSS 8.8 EPSS 2.2%

   Microsoft Dynamics GP Elevation Of Privilege Vulnerability

3. CVE-2022-23272 Microsoft Dynamics GP Elevation Of Privilege Vulnerability

   Published 2022-02-09

   High·CVSS 8.8 EPSS 2.6%

   Microsoft Dynamics GP Elevation Of Privilege Vulnerability

4. CVE-2022-23271 Microsoft Dynamics GP Elevation Of Privilege Vulnerability

   Published 2022-02-09

   High·CVSS 8.8 EPSS 3.8%

   Microsoft Dynamics GP Elevation Of Privilege Vulnerability

5. CVE-2022-23269 Microsoft Dynamics GP Spoofing Vulnerability

   Published 2022-02-09

   Medium·CVSS 5.4 EPSS 1.2%

   Microsoft Dynamics GP Spoofing Vulnerability

6. CVE-2010-2083 Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors.

   Published 2010-05-26

   Medium·CVSS 4.0 EPSS 8.5%

   Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors.

7. CVE-2010-2011 Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain sensitive information...

   Published 2010-05-21

   Medium·CVSS 4.0 EPSS 10.7%

   Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain sensitive information by decrypting a field's contents.

8. CVE-2006-5266 Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allow remote attackers to execute arbitrary code via (1) a crafted Distributed Process Manager (DPM) message....

   Published 2008-06-30

   High·CVSS 7.5 EPSS 15.7%

   Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allow remote attackers to execute arbitrary code via (1) a crafted Distributed Process Manager (DPM) message to the (a) DPM component, or a (2) long string or (3) long IP address in a Distr...

9. CVE-2006-5265 Unspecified vulnerability in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allows remote attackers to cause a denial of service (crash) via an invalid magic number in a Distributed Pro...

   Published 2008-06-30

   Medium·CVSS 5.0 EPSS 10.4%

   Unspecified vulnerability in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allows remote attackers to cause a denial of service (crash) via an invalid magic number in a Distributed Process Server (DPS) message.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.