Dynamics 365 Business Central

dynamics_365_business_central

Vendor: Microsoft • 15 CVEs

CVEs (15)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-40417 1Microsoft 1Dynamics 365 Business Central Jun 17, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.
CVE-2024-43460 1Microsoft 1Dynamics 365 Business Central Jun 17, 2026 Sep 17, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network.
CVE-2024-38225 1Microsoft 1Dynamics 365 Business Central Jun 17, 2026 Sep 10, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVE-2024-35249 1Microsoft 1Dynamics 365 Business Central Jul 20, 2026 Jun 11, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
CVE-2024-35248 1Microsoft 1Dynamics 365 Business Central Jul 21, 2026 Jun 11, 2024 N/A· v4 7.3 HIGH· v3 N/A· v2 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVE-2024-21380 1Microsoft 1Dynamics 365 Business Central Jun 17, 2026 Feb 13, 2024 N/A· v4 8.0 HIGH· v3 N/A· v2 Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
CVE-2023-38167 1Microsoft 1Dynamics 365 Business Central Jun 17, 2026 Aug 8, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVE-2022-41127 1Microsoft 2Dynamics 365 Business Central Dynamics Nav Jun 17, 2026 Dec 13, 2022 N/A· v4 8.5 HIGH· v3 N/A· v2 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
CVE-2021-40440 1Microsoft 1Dynamics 365 Business Central Jun 17, 2026 Sep 15, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVE-2021-36946 1Microsoft 2Dynamics 365 Business Central Dynamics Nav Jun 17, 2026 Aug 12, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVE-2021-34474 1Microsoft 1Dynamics 365 Business Central Jun 17, 2026 Jul 14, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Dynamics Business Central Remote Code Execution Vulnerability
CVE-2021-1724 1Microsoft 2Dynamics 365 Business Central Dynamics Nav Jun 17, 2026 Feb 25, 2021 N/A· v4 4.8 MEDIUM· v3 2.3 LOW· v2 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVE-2020-1022 1Microsoft 2Dynamics 365 Business Central Dynamics Nav Jun 17, 2026 Apr 15, 2020 N/A· v4 8.0 HIGH· v3 6.0 MEDIUM· v2 A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
CVE-2020-1018 1Microsoft 2Dynamics 365 Business Central Dynamics Nav Jun 17, 2026 Apr 15, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successf...Show more An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a masked field.The security update addresses the vulnerability by updating the rendering engine the Windows client to properly detect masked fields and render the content as masked., aka 'Microsoft Dynamics Business Central/NAV Information Disclosure'.Show less
CVE-2020-0905 1Microsoft 2Dynamics 365 Business Central Dynamics Nav Jun 17, 2026 Mar 12, 2020 N/A· v4 8.0 HIGH· v3 6.0 MEDIUM· v2 An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.