MicrosoftKB4549675Cumulative Update 28 for Microsoft Dynamics NAV 2018 (Build 41920)
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
7.9 High
AI Score
Confidence
High
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.019 Low
EPSS
Percentile
88.6%
Cumulative Update 28 for Microsoft Dynamics NAV 2018 (Build 41920)
This article applies to Microsoft Dynamics NAV 2018 for all countries and all language locales.
An information disclosure vulnerability exists if Microsoft Dynamics Business Central/NAV on-premises does not correctly hide the value of a masked field when it displays the records as a chart page. To learn more about the vulnerability, go to CVE-2020-1018.This update also addresses a vulnerability that is related to the NAVRecordState state. To learn more about the vulnerability, go to CVE-2020-1022.
Overview
This cumulative update includes all hotfixes and regulatory features that have been released for Microsoft Dynamics NAV 2018, including hotfixes and regulatory features that were released in previous cumulative updates.This cumulative update replaces previously released cumulative updates. You should always install the latest cumulative update.It may be necessary to update your license after you install this hotfix to gain access to new objects that are included in this or a previous cumulative update. (This applies only to customer licenses.)
For a list of cumulative updates that were released for Microsoft Dynamics NAV 2018, see released cumulative updates for Microsoft Dynamics NAV 2018. Cumulative updates are intended for new and existing customers who are running Microsoft Dynamics NAV 2018.
Important
We recommend that you contact your Microsoft Dynamics Partner before you install hotfixes or updates. It is important to verify that your environment is compatible with the hotfixes or updates being installed. A hotfix or update may cause interoperability issues with customizations and third-party products that work together with your Microsoft Dynamics NAV solution.
| Problems that are resolved in this cumulative updateThe following problems are resolved in this cumulative update.Platform hotfixesID | Title |
|---|---|
| 342203 | The Enable Incremental Company Deletion setting is enabled by default in the on-premises server settings. |
| 347077 | The Show as Chart action displays masked fields in plain text. |
| 348817 | Web client sessions are in a suspended state when the server is under a heavy load. |
| 349585 | The Pending status will not be documented. |
| Application hotfixesID | Title |
| — | — |
| 342243 | The Suggest Vendor Payments batch job does not increment number series values correctly. |
| 342229 | The Payment Terms code is blank when you use the Copy Document function. |
| 343681 | When running the Cal. and Post VAT Settlement report, the Gen. Posting Type field is not set to Settlement for general ledger entries for reverse charge VAT. |
| 344532 | The Original Pmt. Disc. Possible and the Remaining Pmt. Disc. Possible amounts are incorrect in vendor ledger entries. |
| 344605 | Allocated costs are assigned to a blocked cost center. |
| 345320 | You can post unbalanced G/L entries by using a reversing recurring journal although the Force Doc. Balance check box is chosen. |
| 345353 | The Currency Code field can be blank when you use the Rapid Start function to import Currency codes. |
| 345662 | The caption and tooltip of the Allow G/L Acc. Deletion Before field in the General Ledger Setup table/page do not provide enough information. |
| 351131 | The Original Pmt. Disc. Possible and the Remaining Pmt. Disc. Possible amounts are incorrect in vendor ledger entries. |
| 345543 | The inbound transfer of an average cost item is revalued and indirectly contributes to its own cost. |
| 346601 | You cannot sort on the Start Date and End Date fields in production orders after upgrading to cumulative update 24. |
| 345666 | The filter for the Company Name field on the Contacts list page does not display the correct result. |
| 346726 | The Sales Cycle Description field is not displayed when you update an opportunity. |
| 342789 | In a prepayment scenario, sales line comments are not displayed for the prepayment invoice if the Compress Prepayment field is set to true. |
| 346082 | You cannot add more e-mail addresses in the customer card. |
| 344442 | Changing the values in the Lot and Serial No. fields in an inventory pick does not update the item ledger entry and tracking specification when posted. |
| Local application hotfixesAT-** Austria**ID | Title |
| — | — |
| 346463 | An error message displays when you run the VAT Statement report in the Austrian version. |
| **BE -**BelgiumID | Title |
| — | — |
| 345305 | The dimension filter for the Suggest Vendor Payments action in the EB Payment Journal does not work in the Belgian version. |
| ** ****CH - Switzerland**ID | Title |
| — | — |
| 344743 | The Sales Page report does not consider the quote variant in the total amount in the Swiss version. |
| ** ****CZ - Czech**ID | Title |
| — | — |
| 347931 | Change FA Subclass code on the Fixed Asset card in fixed assets with more depreciation books in the Czech version. |
| 349651 | Call of stock in the VIES report in the Czech version. |
| ES - SpainID | Title |
| — | — |
| 330133 | Posting VAT entries from the G/L journal does not check whether there is a customer or a vendor in the transaction in the Spanish version. |
| FR - FranceID | Title |
| — | — |
| 344720 | Service Level <SvcLvl> and Service Level Code <Cd> are missing in the SEPA vendor payment file in the French version. |
| 344470 | “The value can’t be evaluated into type Integer” error message displays when you run the Export G/L Entries - Tax Audit report and the Registration No. field is blank in the company information in the French version. |
| IT - ItalyID | Title |
| — | — |
| 348155 | The advanced amount in the Periodic VAT Settlement table is not inserted correctly in the Calc. and Post VAT Settlement report in the Italian version. |
| 347068 | Withholding tax is not updated after you post the payment because the withholding tax is zero in the Italian version. |
| 342806 | The posting number is used when the check total error is displayed in the Italian version. |
| 347632 | The Reason field is not available in the Vendor Bill Withholding Tax table in the Italian version. |
| NL - NetherlandsID | Title |
| — | — |
| 344650 | The audit file for the tax authority in the report allows only 15 characters in the Document No. field, although Business Central can handle more characters and the file format allows up to 999 characters in the Dutch version. |
| **Local regulatory featuresBE -**BelgiumID | Title |
| — | — |
| 349379 | The PEPPOL implementation is fixed according to partner feedback in the Belgian version. |
| IT - ItalyID | Title |
| — | — |
| 345398 | A new value of Non-Taxable Income Type is added to the withholding tax in the Italian version. |
| NO - NorwayID | Title |
| — | — |
| 349379 | The PEPPOL implementation is fixed according to partner feedback in the Norwegian version. |
| UK - United KingdomID | Title |
| — | — |
| 349650 | Make headers update for the Tax Digital FP in the British version. |
Resolution
| How to obtain the Microsoft Dynamics NAV update filesThis update is available for manual download and installation from the Microsoft Download Center.Cumulative Update 28 for Microsoft Dynamics NAV 2018 Which hotfix package to downloadThis cumulative update has multiple hotfix packages. Select and download one of the following packages depending on the country version of your Microsoft Dynamics NAV 2018 database:Country | Hotfix package |
|---|---|
| AT - Austria | Download the CU 28 NAV 2018 AT package |
| AU - Australia | Download the CU 28 NAV 2018 AU package |
| BE - Belgium | Download the CU 28 NAV 2018 BE package |
| CH - Switzerland | Download the CU 28 NAV 2018 CH package |
| CZ- Czech | Download the CU 28 NAV 2018 CZ package |
| DE - Germany | Download the CU 28 NAV 2018 DE package |
| DK - Denmark | Download the CU 28 NAV 2018 DK package |
| ES - Spain | Download the CU 28 NAV 2018 ES package |
| FI - Finland | Download the CU 28 NAV 2018 FI package |
| FR - France | Download the CU 28 NAV 2018 FR package |
| IS - Iceland | Download the CU 28 NAV 2018 IS package |
| IT - Italy | Download the CU 28 NAV 2018 IT package |
| NA - North America | Download the CU 28 NAV 2018 NA package |
| NL - Netherlands | Download the CU 28 NAV 2018 NL package |
| NO - Norway | Download the CU 28 NAV 2018 NO package |
| NZ - New Zealand | Download the CU 28 NAV 2018 NZ package |
| RU - Russia | Download the CU 28 NAV 2018 RU package |
| SE - Sweden | Download the CU 28 NAV 2018 SE package |
| UK - United Kingdom | Download the CU 28 NAV 2018 UK package |
| All other countries | Download the CU 28 NAV 2018 W1 package |
| How to install a Microsoft Dynamics NAV 2018 cumulative updateSee How to install a Microsoft Dynamics NAV 2018 cumulative update.PrerequisitesYou must have Microsoft Dynamics NAV 2018 installed to apply this hotfix. |
More information
See more information about software update terminology and Microsoft Dynamics NAV 2018.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the “Applies to” section.
Related
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
7.9 High
AI Score
Confidence
High
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.019 Low
EPSS
Percentile
88.6%