Priority MEDIUM 52
Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01532 · Published 2026-07-14 · Fixed in 11.0.50704.0 CWE-502
Priority MEDIUM 40
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.01711 · Published 2022-12-13 · Fixed in Build 52203, Build 30712 +19
Priority LOW 23
Microsoft Dynamics Business Central Information Disclosure Vulnerability
CVSS 3.1MEDIUM 4.4· Network · High privileges · No interaction · EPSS 0.01469 · Published 2022-11-09 · Fixed in 14.0.49339, 19.0.48446 +3
Priority LOW 26
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01028 · Published 2021-08-12 · Fixed in 14.0.47540, 16.0.28457 +3 CWE-79
Priority LOW 30
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVSS 3.1MEDIUM 6.1· Adjacent network · Low privileges · User interaction · EPSS 0.01307 · Published 2021-02-25 · Fixed in publication CWE-79
Priority LOW 35
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03843 · Published 2020-12-09 · Fixed in publication
Priority MEDIUM 45
A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.06831 · Published 2020-04-15 · No fix listed
Priority MEDIUM 42
An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successf…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.06311 · Published 2020-04-15 · No fix listed CWE-200
Priority MEDIUM 48
An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.10838 · Published 2020-03-12 · No fix listed
Priority LOW 27
A cross site scripting vulnerability exists when Microsoft Dynamics NAV does not properly sanitize a specially crafted web request to an affected Dynamics NAV server, aka "Microsoft Dynamics NAV Cross Site Scripting Vuln…
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01463 · Published 2018-12-12 · No fix listed CWE-79
THREATIST.IORead the docs