Microsoft Copilot security directory

Entersoft

Published by Entersoft SA

High risk

Entersoft Connector makes avaiable to the external ecosystem the rich set of services, objects, and events of the Entersoft Business Suite products: CRM, ERP, WMS, Retail, Mobile Apps, POD, e-Commerce, MRPII. Flows and apps of any type can integrate with the services exposed by Entersoft Connector. Workflows can be triggered by events taking palce at the Entersoft Application's Server leveraging the reachness of Entersoft Business Suite family products.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Can send messages as you: This connector can post messages, emails, or notifications on your behalf. Recipients will believe the message came from you, which makes phishing or social-engineering risks higher.
  • Can execute code or queries: This connector can run arbitrary queries or code against a database or execution engine. An AI-generated query could be manipulated to exfiltrate, corrupt, or destroy data.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 112 tools or capabilities.

  • Add a New or Update an existing Related Document
  • Add data to a Blob record
  • Approve or Decline an RFA Request
  • Broadcast an Entersoft type of message
  • Create a new Entity By ID
  • Create a new entity by Type
  • Create a Request to be Approved or Declined
  • Create or Update a Finacial Document
  • Delete an entity's Related Document
  • Delete an entity by ID and PK
  • Delete an entity by Type and PK
  • Download a Web Asset
  • Download Blob data of a Blob Record
  • Execute a context-less Automation Command
  • Execute a Form Automation Command
  • Execute a New Entity Automation
  • Execute a Scroller Automation Command
  • Execute an Entersoft Business Suite service
  • Execute an Entersoft Business Suite service v2
  • Execute an Update Entity Automation
  • Execute an Update Entity Automation by Code
  • Get a list of Entities by ID
  • Get a list of Entities by Type
  • Get a Property Set

The interactive security report will load automatically.