Microsoft Dynamics Gp vulnerabilities

9 CVEs affecting Microsoft Dynamics Gp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-23274, published 2022-02-09.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-5266, published 2006-12-31. High severity, CVSS 7.5. EPSS: 15.7% chance of exploitation in the next 30 days. Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allow remote attackers to execute arbitrary code via (1) a crafted Distributed Process Manager (DPM) message…
• CVE-2010-2011, published 2010-05-21. Medium severity, CVSS 4.0. EPSS: 10.7% chance of exploitation in the next 30 days. Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier for remote authenticated users to obtain sensitive…
• CVE-2006-5265, published 2006-12-31. Medium severity, CVSS 5.0. EPSS: 10.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allows remote attackers to cause a denial of service (crash) via an invalid magic number in a Distributed…
• CVE-2010-2083, published 2010-05-26. Medium severity, CVSS 4.0. EPSS: 8.5% chance of exploitation in the next 30 days. Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors.
• CVE-2022-23271, published 2022-02-09. Medium severity, CVSS 6.5. EPSS: 3.8% chance of exploitation in the next 30 days. Microsoft Dynamics GP Elevation Of Privilege Vulnerability
• CVE-2022-23272, published 2022-02-09. High severity, CVSS 8.1. EPSS: 2.6% chance of exploitation in the next 30 days. Microsoft Dynamics GP Elevation Of Privilege Vulnerability
• CVE-2022-23273, published 2022-02-09. High severity, CVSS 7.1. EPSS: 2.2% chance of exploitation in the next 30 days. Microsoft Dynamics GP Elevation Of Privilege Vulnerability
• CVE-2022-23274, published 2022-02-09. High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days. Microsoft Dynamics GP Remote Code Execution Vulnerability
• CVE-2022-23269, published 2022-02-09. Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days. Microsoft Dynamics GP Spoofing Vulnerability