5.5
Medium
CVE-2025-29821 Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally
Description
Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Dynamics 365 Business Central 2024 Wave 1 2024 24.0 | 24.0 → < 24.0.32305 | 24.0.32305 |
| Microsoft Dynamics 365 Business Central 2023 Wave 2 23.0 | 23.0 → < 23.0.32309 | 23.0.32309 |
| Microsoft Dynamics 365 Business Central 2024 Wave 2 25.0 | 25.0 → < 25.2.32308 | 25.2.32308 |
| Microsoft Dynamics 365 Business Central 2025 Wave 1 26.0 | 26.0 → < 26.0.32481 | 26.0.32481 |
References
- Microsoft Dynamics Business Central Information Disclosure Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified