The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV lies in the improper elimination of certain elements in the output data used by the incoming component, allowing an attacker to execute arbitrary code.

Dynamics 365 and NAV vulnerability due to improper elimination of output data elements enabling remote code execution.

Reporter	Title	Published	Views	Family All 20
Information Security Automation	Microsoft Patch Tuesday April 2020: my classification script, confusing RCE in Adobe Type Manager and updates for older vulnerabilities	26 Apr 202001:24	–	avleonov
CVE	CVE-2020-1022	15 Apr 202015:13	–	cve
Cvelist	CVE-2020-1022	15 Apr 202015:13	–	cvelist
Microsoft KB	Cumulative Update 54 for Microsoft Dynamics NAV 2016 (Build 51811)	14 Apr 202007:00	–	mskb
Microsoft KB	Cumulative Update 41 for Microsoft Dynamics NAV 2017 (Build 30219)	14 Apr 202007:00	–	mskb
Microsoft KB	Cumulative Update 28 for Microsoft Dynamics NAV 2018 (Build 41920)	14 Apr 202007:00	–	mskb
Microsoft KB	Cumulative Update 18 for Microsoft Dynamics 365 Business Central October'18 on-premises (Application Build 41909, Platform Build 41879)	14 Apr 202007:00	–	mskb
Microsoft KB	Cumulative Update 11 for Microsoft Dynamics 365 Business Central April'19 on-premises (Application Build 14.12.41935, Platform Build 14.0.41862)	14 Apr 202007:00	–	mskb
Microsoft KB	Update 15.5 for Microsoft Dynamics 365 Business Central 2019 Release Wave 2 (Application Build 15.5.41926, Platform Build 15.0.41893)	14 Apr 202007:00	–	mskb
Microsoft KB	Description of the security update for Microsoft Dynamics NAV 2013 R2: April 14, 2020	14 Apr 202007:00	–	mskb