VendorsMicrosoftdynamics_365_business_centralall versions
Vulnerabilities

Microsoft Dynamics 365 Business Central

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

15CVEs
CVE-2024-38225
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Published 2024-09-10 · Analyzed
9.8EPSS 0.014
CVE-2024-35249
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
Published 2024-06-11 · Modified
8.8EPSS 0.034
CVE-2024-43460
Dynamics 365 Business Central Elevation of Privilege Vulnerability
Published 2024-09-17 · Analyzed
8.8EPSS 0.007
CVE-2022-41127
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
Published 2022-12-13 · Modified
8.5EPSS 0.016
CVE-2020-0905
An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
Published 2020-03-12 · Modified
8.0EPSS 0.108
CVE-2020-1022
A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
Published 2020-04-15 · Modified
8.0EPSS 0.068
CVE-2021-34474
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
Published 2021-07-14 · Modified
8.0EPSS 0.022
CVE-2024-21380
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
Published 2024-02-13 · Modified
8.0EPSS 0.017
CVE-2026-40417
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Published 2026-05-12 · Analyzed
7.8EPSS 0.003
CVE-2020-1018
An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a masked field.The security update addresses the vulnerability by updating the rendering engine the Windows client to properly detect masked fields and render the content as masked., aka 'Microsoft Dynamics Business Central/NAV Information Disclosure'.
Published 2020-04-15 · Modified
7.5EPSS 0.063
CVE-2024-35248
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Published 2024-06-11 · Modified
7.3EPSS 0.010
CVE-2023-38167
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Published 2023-08-08 · Modified
7.2EPSS 0.014
CVE-2021-1724
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Published 2021-02-25 · Modified
6.1EPSS 0.013
CVE-2021-40440
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Published 2021-09-15 · Modified
5.4EPSS 0.011
CVE-2021-36946
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Published 2021-08-12 · Modified
5.4EPSS 0.010