Priority LOW 36
Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00272 · Published 2026-05-12 · Fixed in 25.2.48119, 28.0.49873 +2 CWE-1390
Priority LOW 39
Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00714 · Published 2024-09-17 · No fix listed CWE-285
Priority MEDIUM 46
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01373 · Published 2024-09-10 · Fixed in 22.0.64727, 24.0.22865 +1 CWE-287
Priority MEDIUM 46
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0343 · Published 2024-06-11 · Fixed in 22.0.64336, 23.0.18933 +1 CWE-502
Priority MEDIUM 42
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.00952 · Published 2024-06-11 · Fixed in 23.0.18933, 24.0.19487 CWE-1390
Priority MEDIUM 40
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.01739 · Published 2024-02-13 · Fixed in 21.0.63175, 22.0.63124 +1 CWE-200
Priority LOW 36
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01395 · Published 2023-08-08 · Fixed in 22.0.59520 CWE-284
Priority MEDIUM 40
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.01711 · Published 2022-12-13 · Fixed in Build 52203, Build 30712 +19
Priority LOW 27
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01064 · Published 2021-09-15 · Fixed in 17.0.29460, 18.0.29486 CWE-79
Priority LOW 26
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01028 · Published 2021-08-12 · Fixed in 14.0.47540, 16.0.28457 +3 CWE-79
Priority MEDIUM 41
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
CVSS 3.1HIGH 8.0· Network · High privileges · No interaction · EPSS 0.02175 · Published 2021-07-14 · Fixed in 16.0.27253, 17.0.27235 +1
Priority LOW 30
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVSS 3.1MEDIUM 6.1· Adjacent network · Low privileges · User interaction · EPSS 0.01307 · Published 2021-02-25 · Fixed in publication CWE-79
Priority MEDIUM 45
A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.06831 · Published 2020-04-15 · No fix listed
Priority MEDIUM 42
An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successf…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.06311 · Published 2020-04-15 · No fix listed CWE-200
Priority MEDIUM 48
An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.10838 · Published 2020-03-12 · No fix listed
THREATIST.IORead the docs