Strix
26.1K

CVE-2014-0261

UnknownEPSS 10.30%

Last modified

CVE-2014-0261 is a vulnerability of currently unknown severity. Microsoft Dynamics AX 4.0 SP2, 2009 SP1, 2012, and 2012 R2 allows remote authenticated users to cause a denial of service (instance outage) via crafted data to an Application Object Server (AOS) instance, aka "Query Filter DoS Vulnerability.". EPSS estimates a 10.30% chance of exploitation in the next 30 days.

Description

Microsoft Dynamics AX 4.0 SP2, 2009 SP1, 2012, and 2012 R2 allows remote authenticated users to cause a denial of service (instance outage) via crafted data to an Application Object Server (AOS) instance, aka "Query Filter DoS Vulnerability."

Metrics

EPSS Probability
10.30%

95.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
MicrosoftDynamics Ax4.0Sp2
MicrosoftDynamics Ax2009Sp1
MicrosoftDynamics Ax2012—

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2014-0261?
Microsoft Dynamics AX 4.0 SP2, 2009 SP1, 2012, and 2012 R2 allows remote authenticated users to cause a denial of service (instance outage) via crafted data to an Application Object Server (AOS) instance, aka "Query Filter DoS Vulnerability."
How severe is CVE-2014-0261?
Severity scoring for CVE-2014-0261 is pending analysis. The EPSS model estimates a 10.30% probability of exploitation in the next 30 days.
How do I fix CVE-2014-0261?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-0261?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST