Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-16804 State: REJECTED Published: 2021-12-20T22:51:43 Last Updated: 2021-12-20T22:51:43 Description: No description available.
CVE ID: CVE-2020-16805 State: REJECTED Published: 2021-12-20T22:51:44 Last Updated: 2021-12-20T22:51:44 Description: No description available.
CVE ID: CVE-2020-16806 State: REJECTED Published: 2021-12-20T22:51:45 Last Updated: 2021-12-20T22:51:45 Description: No description available.
CVE ID: CVE-2020-16807 State: REJECTED Published: 2021-12-20T22:51:45 Last Updated: 2021-12-20T22:51:45 Description: No description available.
CVE ID: CVE-2020-16808 State: REJECTED Published: 2021-12-20T22:51:46 Last Updated: 2021-12-20T22:51:46 Description: No description available.
CVE ID: CVE-2020-16809 State: REJECTED Published: 2021-12-20T22:51:47 Last Updated: 2021-12-20T22:51:47 Description: No description available.
CVE ID: CVE-2020-16810 State: REJECTED Published: 2021-12-20T22:51:47 Last Updated: 2021-12-20T22:51:47 Description: No description available.
CVE ID: CVE-2020-16811 State: REJECTED Published: 2021-12-20T22:51:48 Last Updated: 2021-12-20T22:51:48 Description: No description available.
CVE ID: CVE-2020-16812 State: REJECTED Published: 2021-12-20T22:51:49 Last Updated: 2021-12-20T22:51:49 Description: No description available.
CVE ID: CVE-2020-16813 State: REJECTED Published: 2021-12-20T22:51:50 Last Updated: 2021-12-20T22:51:50 Description: No description available.
CVE ID: CVE-2020-16814 State: REJECTED Published: 2021-12-20T22:51:50 Last Updated: 2021-12-20T22:51:50 Description: No description available.
CVE ID: CVE-2020-16815 State: REJECTED Published: 2021-12-20T22:51:51 Last Updated: 2021-12-20T22:51:51 Description: No description available.
CVE ID: CVE-2020-16816 State: REJECTED Published: 2021-12-20T22:51:52 Last Updated: 2021-12-20T22:51:52 Description: No description available.
CVE ID: CVE-2020-16817 State: REJECTED Published: 2021-12-20T22:51:52 Last Updated: 2021-12-20T22:51:52 Description: No description available.
CVE ID: CVE-2020-16818 State: REJECTED Published: 2021-12-20T22:51:53 Last Updated: 2021-12-20T22:51:53 Description: No description available.
CVE ID: CVE-2020-16819 State: REJECTED Published: 2021-12-20T22:51:54 Last Updated: 2021-12-20T22:51:54 Description: No description available.
CVE ID: CVE-2020-16820 State: REJECTED Published: 2021-12-20T22:51:55 Last Updated: 2021-12-20T22:51:55 Description: No description available.
CVE ID: CVE-2020-16821 State: REJECTED Published: 2021-12-20T22:51:55 Last Updated: 2021-12-20T22:51:55 Description: No description available.
CVE ID: CVE-2020-16822 State: REJECTED Published: 2021-12-20T22:51:56 Last Updated: 2021-12-20T22:51:56 Description: No description available.
CVE ID: CVE-2020-16823 State: REJECTED Published: 2021-12-20T22:51:57 Last Updated: 2021-12-20T22:51:57 Description: No description available.
CVE ID: CVE-2020-16824 State: REJECTED Published: 2021-12-20T22:51:57 Last Updated: 2021-12-20T22:51:57 Description: No description available.
CVE ID: CVE-2020-16825 State: REJECTED Published: 2021-12-20T22:51:58 Last Updated: 2021-12-20T22:51:58 Description: No description available.
CVE ID: CVE-2020-16826 State: REJECTED Published: 2021-12-20T22:51:59 Last Updated: 2021-12-20T22:51:59 Description: No description available.
CVE ID: CVE-2020-16827 State: REJECTED Published: 2021-12-20T22:52:00 Last Updated: 2021-12-20T22:52:00 Description: No description available.
CVE ID: CVE-2020-16828 State: REJECTED Published: 2021-12-20T22:52:00 Last Updated: 2021-12-20T22:52:00 Description: No description available.
CVE ID: CVE-2020-16829 State: REJECTED Published: 2021-12-20T22:52:03 Last Updated: 2021-12-20T22:52:03 Description: No description available.
CVE ID: CVE-2020-16830 State: REJECTED Published: 2021-12-20T22:52:04 Last Updated: 2021-12-20T22:52:04 Description: No description available.
CVE ID: CVE-2020-16831 State: REJECTED Published: 2021-12-20T22:52:05 Last Updated: 2021-12-20T22:52:05 Description: No description available.
CVE ID: CVE-2020-16832 State: REJECTED Published: 2021-12-20T22:52:05 Last Updated: 2021-12-20T22:52:05 Description: No description available.
CVE ID: CVE-2020-16833 State: REJECTED Published: 2021-12-20T22:52:06 Last Updated: 2021-12-20T22:52:06 Description: No description available.
CVE ID: CVE-2020-16834 State: REJECTED Published: 2021-12-20T22:52:07 Last Updated: 2021-12-20T22:52:07 Description: No description available.
CVE ID: CVE-2020-16835 State: REJECTED Published: 2021-12-20T22:52:08 Last Updated: 2021-12-20T22:52:08 Description: No description available.
CVE ID: CVE-2020-16836 State: REJECTED Published: 2021-12-20T22:52:08 Last Updated: 2021-12-20T22:52:08 Description: No description available.
CVE ID: CVE-2020-16839 State: PUBLISHED Published: 2021-07-27T14:20:25 Last Updated: 2024-08-04T13:45:33.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Crestron DM-NVX-DIR, DM-NVX-DIR80, and DM-NVX-ENT devices before the DM-XIO/1-0-3-802 patch, the password can be changed by sending an unauthenticated WebSocket request. Additional Analyst Notes: - CVE Program Container: References: - https://support.crestron.com - https://www.crestron.com/Software-Firmware/Firmware/DigitalMedia/DM-XIO/1-0-3-802 - https://www.security.crestron.com
CVE ID: CVE-2020-16843 State: PUBLISHED Published: 2020-08-04T19:39:04 Last Updated: 2024-08-04T13:45:33.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic. This can result in a denial of service on the microVM when it is configured with a single network interface, and an availability problem for the microVM network interface on which the issue is triggered. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/firecracker-microvm/firecracker/issues/2057 - https://www.openwall.com/lists/oss-security/2020/08/13/1 - http://www.openwal
ecracker-microvm/firecracker/issues/2057 - https://www.openwall.com/lists/oss-security/2020/08/13/1 - http://www.openwall.com/lists/oss-security/2020/08/13/1
CVE ID: CVE-2020-16844 State: PUBLISHED Published: 2020-10-01T16:32:38 Last Updated: 2024-08-04T13:45:34.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using wildcard suffixes (e.g. *-some-suffix) for source principals or namespace fields, callers will never be denied access, bypassing the intended policy. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/istio/istio/releases - https://istio.io/latest/news/security/istio-security-2020-009/
CVE ID: CVE-2020-16845 State: PUBLISHED Published: 2020-08-06T17:03:33 Last Updated: 2024-08-04T13:45:33.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21topic/golang-announce/_ulYYcIWg3Q - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00028.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6R
0-08/msg00028.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6RCFJTMKHY5ICGEM5BUFUEDDGSPJ25XU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWRBAH4UZJO3RROQ72SYCUPFCJFA22FO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WV2VWKFTH4EJGZBZALVUJQJOAQB5MDQ4/ - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00030.
pensuse-security-announce/2020-09/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00030.html - https://lists.debian.org/debian-lts-announce/2020/11/msg00037.html - https://lists.debian.org/debian-lts-announce/2020/11/msg00038.html - https://www.debian.org/security/2021/dsa-4848 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://groups.google.com/forum/#%21topic/golang-announce/NyPIaucMgXo - https://security.netapp.com/advisory/ntap-20200924-0002/
CVE ID: CVE-2020-16846 State: PUBLISHED Published: 2020-11-06T07:27:24.000Z Last Updated: 2025-10-21T23:35:33.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/saltstack/salt/releases - https://www.saltstack.com/blog/on-november-3-2020-saltstack-publicly-disclosed-three-new-cves/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/ -
s.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TPOGB2F6XUAIGFDTOCQDNB2VIXFXHWMA/ - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00029.html - https://security.gentoo.org/glsa/202011-13 - http://packetstormsecurity.com/files/160039/SaltStack-Salt-REST-API-Arbitrary-Command-Execution.html - https://www.zerodayinitiative.com/advisories/ZDI-20-1381/ - https://www.zerodayinitiative.com/advisories/ZDI-20-1383/ - https://www.zerodayinitiative.com/advisories/ZDI-20-1380/ - https://www.zerodayinitiative.com/advisories/ZDI-20-1379/ - https://www.zerodayinitiative.com/advisories/ZDI-20-1382/ - https://lists.debian.org/debian-lts-announce/2020/12/m
79/ - https://www.zerodayinitiative.com/advisories/ZDI-20-1382/ - https://lists.debian.org/debian-lts-announce/2020/12/msg00007.html - https://www.debian.org/security/2021/dsa-4837 - https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html
CVE ID: CVE-2020-16847 State: PUBLISHED Published: 2020-08-04T20:15:05 Last Updated: 2024-08-04T13:45:34.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka CFD-4887. Additional Analyst Notes: - CVE Program Container: References: - https://gtacknowledge.extremenetworks.com/articles/Solution/000051136 - https://documentation.extremenetworks.com/release_notes/netsight/XMC_8.5.0_Release_Notes.pdf
CVE ID: CVE-2020-16849 State: PUBLISHED Published: 2020-11-30T21:27:58 Last Updated: 2024-08-04T13:45:34.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information. Additional Analyst Notes: - CVE Program Container: References: - https://www.canon-europe.com/support/product-security/ - https://blog.scadafence.com/vulnerability-report-cve-2020-16849
CVE ID: CVE-2020-16850 State: PUBLISHED Published: 2020-11-30T21:34:28 Last Updated: 2024-08-04T13:45:33.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mitsubishi MELSEC iQ-R Series PLCs with firmware 49 allow an unauthenticated attacker to halt the industrial process by sending a crafted packet over the network. This denial of service attack exposes Improper Input Validation. After halting, physical access to the PLC is required in order to restore production, and the device state is lost. This is related to R04CPU, RJ71GF11-T2, R04CPU, and RJ71GF11-T2. Additional Analyst Notes: - CVE Program Container: References: - https://blog.scadafence.com/vulnerability-in-mitsubishi-e
ditional Analyst Notes: - CVE Program Container: References: - https://blog.scadafence.com/vulnerability-in-mitsubishi-electric-melsec-iq-r-series - https://us-cert.cisa.gov/ics/advisories/icsa-20-282-02
CVE ID: CVE-2020-16851 State: PUBLISHED Published: 2020-09-11T17:08:35 Last Updated: 2024-08-04T13:45:33.215Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: OneDrive for Windows Problem Types: Denial of Service Description: <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that cou
n attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and delete a targeted file with an elevated status.</p> <p>The update addresses this vulnerability by correcting where the OneDrive updater performs file writes while running with elevation.</p> Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16851
CVE ID: CVE-2020-16852 State: PUBLISHED Published: 2020-09-11T17:08:35 Last Updated: 2024-08-04T13:45:33.189Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: OneDrive for Windows Problem Types: Denial of Service Description: <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that cou
n attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and delete a targeted file with an elevated status.</p> <p>The update addresses this vulnerability by correcting where the OneDrive updater performs file writes while running with elevation.</p> Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16852
CVE ID: CVE-2020-16853 State: PUBLISHED Published: 2020-09-11T17:08:36 Last Updated: 2024-08-04T13:45:34.497Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: OneDrive for Windows Problem Types: Denial of Service Description: <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that cou
n attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and delete a targeted file with an elevated status.</p> <p>The update addresses this vulnerability by correcting where the OneDrive updater performs file writes while running with elevation.</p> Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16853
CVE ID: CVE-2020-16854 State: PUBLISHED Published: 2020-09-11T17:08:36 Last Updated: 2024-08-04T13:45:34.406Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1709 for 32-bit Systems, Windows 10 Version 1709, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows
stems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Information Disclosure Description: <p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit this vulnerability, an
vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p> <p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p> Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16854
CVE ID: CVE-2020-16855 State: PUBLISHED Published: 2020-09-11T17:08:38 Last Updated: 2024-08-04T13:45:33.993Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019 for Mac, Microsoft Office 2016 for Mac Problem Types: Information Disclosure Description: <p>An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory. An attacker who successfully exploited the vulnerability could view out of bound memory.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted
could view out of bound memory.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software.</p> <p>The security update addresses the vulnerability by properly initializing the affected variable.</p> Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16855
CVE ID: CVE-2020-16856 State: PUBLISHED Published: 2020-09-11T17:08:40 Last Updated: 2024-08-04T13:45:34.276Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6), Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8), Microsoft Visual Studio 2019 version 16.0, Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3), Microsoft Visual Studio 2012 Update 5, Microsoft Visual Studio 2013 Update 5, Microsoft Visual Studio 2015 Update 3 Problem Types: Remote Code Execution Description: <p>A remote code execution vulnerability exists in Visual Studio when
Problem Types: Remote Code Execution Description: <p>A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>To exploit the vulne
on the system could be less impacted than users who operate with administrative user rights.</p> <p>To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted file with an affected version of Visual Studio.</p> <p>The update addresses the vulnerability by correcting how Visual Studio handles objects in memory.</p> Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16856
CVE ID: CVE-2020-16857 State: PUBLISHED Published: 2020-09-11T17:08:41 Last Updated: 2024-08-04T13:45:33.226Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Dynamics 365 for Finance and Operations Problem Types: Remote Code Execution Description: <p>A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server.</p> <p>An authenticated attacker with privileges to import and export data could exploit this vulnerability
tim server.</p> <p>An authenticated attacker with privileges to import and export data could exploit this vulnerability by sending a specially crafted file to a vulnerable Dynamics server.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Dynamics 365 for Finance and Operations (on-premises) version 10.0.11 handles user input.</p> Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16857
CVE ID: CVE-2020-16858 State: PUBLISHED Published: 2020-09-11T17:08:42 Last Updated: 2024-08-04T13:45:34.617Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises) version 9.0 Problem Types: Spoofing Description: <p>A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.</p> <p>The attacker who successfully exploited the vulnerability could then per
request to an affected Dynamics server.</p> <p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current authenticated user. These attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions within Dynamics Server on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.</p> <p>The security update addresses the vulnerability by helping to ensure that Dynamics Server properly sanitizes web requests.</p> Additional Analyst Notes:
vulnerability by helping to ensure that Dynamics Server properly sanitizes web requests.</p> Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16858