5.4
Medium
CVE-2021-36946 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Description
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Dynamics NAV 2017 1.0 | 1.0 → < 30601 | 30601 |
| Microsoft Dynamics NAV 2018 1.0 | 1.0 → < 47562 | 47562 |
| Dynamics 365 Business Central Spring 2019 Update 14.0 | 14.0.0 → < 14.0.47540 | 14.0.47540 |
| Microsoft Dynamics 365 Business Central 2020 Release Wave 2 - Update 17.9 17.0 | 17.0 → < 17.0.28458 | 17.0.28458 |
| Microsoft Dynamics 365 Business Central 2020 Release Wave 1 - Update 16.15 16.0 | 16.0 → < 16.0.28457 | 16.0.28457 |
References
- Microsoft Dynamics Business Central Cross-site Scripting Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Dynamics NAV 2017
The 8 CVEs of Microsoft Dynamics NAV 2017 →
CVE-2026-100214
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a…
8.8
High
CVE-2026-40375
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network
6.5
Medium
CVE-2022-41127
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
8.5
High
CVE-2021-1724
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
6.1
Medium