Lucene search
MicrosoftMS:CVE-2024-38225HistorySep 10, 2024 - 7:00 a.m.
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
2024-09-1007:00:00
Microsoft
msrc.microsoft.com
1
security vulnerability
dynamics 365
elevation of privilege
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.002
Percentile
58.1%
Affected configurations
Node
microsoftdynamics_365_business_centralRange<App Build 24.4. 22925, Platform Build 24.0. 22865
ORmicrosoftdynamics_365_business_centralRange<App Build 23.10.22604, Platform Build 23.0.22561
ORmicrosoftdynamics_365_business_centralRange<App Build 22.16.64731, Platform Build 22.0.64727
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | dynamics_365_business_central | * | cpe:2.3:a:microsoft:dynamics_365_business_central:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
vulnrichment
vulnrichment
cve
cve
CVE-2024-38225
2024-09-10 17:15:25
mskb
mskb
Update 24.4 for Microsoft Dynamics 365 Business Central (on-premises) 2024 Release Wave 1 (Application Build 24.4.22925, Platform Build 24.0.22865)
2024-09-10 07:00:00
nessus
nessus
nvd
nvd
CVE-2024-38225
2024-09-10 17:15:25
kaspersky
kaspersky
KLA73226 Multiple vulnerabilities in Microsoft Dynamics
2024-09-10 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - September 2024
2024-09-10 20:49:21
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.002
Percentile
58.1%
Related for MS:CVE-2024-38225