6.1
Medium
CVE-2021-1724 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Description
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Dynamics NAV 2018 1.0 | 1.0 → latest | No fix stated |
| Microsoft Dynamics 365 Business Central 2020 Release Wave 1 16.0 | 16.0.0 → latest | No fix stated |
| Dynamics 365 Business Central 2019 Release Wave 2 (On-Premise) 15.0 | 15.0.0 → latest | No fix stated |
| Microsoft Dynamics NAV 2017 1.0 | 1.0 → latest | No fix stated |
| Microsoft Dynamics 365 Business Central 2020 Release Wave 2 17.0 | 17.0.0 → latest | No fix stated |
| Microsoft Dynamics NAV 2015 1.0 | 1.0 → latest | No fix stated |
| Microsoft Dynamics NAV 2016 1.0 | 1.0 → latest | No fix stated |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Dynamics NAV 2018
The 13 CVEs of Microsoft Dynamics NAV 2018 →
CVE-2026-102226
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an…
8.8
High
CVE-2026-100214
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a…
8.8
High
CVE-2026-105728
Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a…
7.5
High
CVE-2026-105727
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an…
8.8
High