Lucene search
MicrosoftKB5005370HistoryAug 10, 2021 - 7:00 a.m.
Cumulative Update 26 for Microsoft Dynamics 365 Business Central April'19 on-premises (Application Build 14.27.47563, Platform Build 14.0.47540)
2021-08-1007:00:00
Microsoft
support.microsoft.com
59
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
6 Medium
AI Score
Confidence
High
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
19.0%
Cumulative Update 26 for Microsoft Dynamics 365 Business Central April’19 on-premises (Application Build 14.27.47563, Platform Build 14.0.47540)
Overview
This cumulative update replaces previously released cumulative updates. You should always install the latest cumulative update. This update also fixes an XSS vulnerability. For more information, see CVE-2021-36946.It may be necessary to update your license after you install this hotfix to gain access to new objects that are included in this or a previous cumulative update. (This applies only to customer licenses.)
| For a list of cumulative updates that were released for Microsoft Dynamics 365 Business Central Spring 2019, see released cumulative updates for Microsoft Dynamics 365 Business Central Spring 2019. Cumulative updates are intended for new and existing customers who are running Microsoft Dynamics Released Cumulative Updates for Microsoft Dynamics 365 Business Central Spring 2019.NoteWhen you upgrade to Business Central 2019 release wave 2 (version 15), refer to Dynamics 365 Business Central Upgrade Compatibility Matrix to see which Business Central 15 versions are compatible with this cumulative update.ImportantWe recommend that you contact your Microsoft Dynamics Partner before you install hotfixes or updates. It is important to verify that your environment is compatible with the hotfixes or updates that will be installed. A hotfix or update may cause interoperability issues with customizations and third-party products that work together with your Microsoft Dynamics 365 Business Central solution.Problems that are resolved in this cumulative updateThe following problems are resolved in this cumulative update.Platform hotfixesID | Title |
|---|---|
| 400778 | Notes and links are missing in application areas. |
| 405642 | Login is needed every time when switching companies on the iOS app. |
| 401649 | Microsoft Dynamics NAV Universal iOS App requires login every time. |
| Application hotfixes ID | Title |
| — | — |
| 401360 | The change log compares changes from the incorrect company. |
| 402197 | The field mapping definition should include the Data Exch. Line Def Code filter on deletion. |
| 397537 | The payment discount tolerance warning doesn’t show when using the Applies-to Doc. Type -No. function to apply an invoice in the payment discount tolerance period. |
| 399839 | The column header should be added to the period filter when setting up trial balance for small business. |
| 401994 | The total amount of the reminder is not correct when one of the invoices is overdue for the number of days less than grace period in first level. |
| 403638 | Incorrect caption is used for a field in the Cost Entry table. |
| 403952 | Error messages when using the EU VAT Registration No. Validation Service. |
| 405338 | Inconsistency error message when trying to post a sales invoice with foreign currency. |
| 405400 | The VAT amount LCY can be different before and after posting if the foreign currency invoice is posted from a journal. |
| 406066 | “There is no Cust. Ledger Entry within the filter.” error message when running a VAT- VIES Declaration Disk after applying entries with the Adjust VAT for Payment Discount feature enabled. |
| 401404 | Depreciation book code error message when trying to modify the depreciation book of a fixed asset. |
| 401399 | The contract expiration dates of the lines are not changed accordingly after changing the service contract Expiration Date in the header. |
| 404454 | “The length of the string is 22, but it must be less than or equal 20 characters.” error message when setting Item No. Filter in Adjust Cost - Item Entries report. |
| 403460 | The actual cost can’t be fully posted to the total WIP cost amount after using the calculate WIP function. |
| 400910 | “The Detailed Vendor Ledg. Entry already exists. Identification fields and values: Entry No.=‘XXXX’”, error message when trying to un-apply entries. |
| 404869 | Qty. to Invoice is 0 after the goods have been received when updating tooltips in the sales and purchase setup. |
| 403995 | The document date is different from the posting date in VAT entries after un-applying a payment with an invoice with a payment discount. |
| 404686 | The Closed by Entry No. doesn’t work correctly in VAT entries after running close and post VAT settlement. |
| 402334 | The tracking line at warehouse shipment level is not updated when registering partial pick if Do Not Fill Qty. to Handle option is set at pick creation level. |
| 405935 | The standard sales pro forma invoice does not print quantity or amounts when customers use WMS. |
| 406137 | The default safety lead time should not be considered for drop shipment. |
| Local application hotfixes****APACID | Title |
| — | — |
| 401235 | Invalid withholding tax entries when un-applying entries in the APAC version. |
| BE - BelgiumID | Title |
| — | — |
| 405688 | Multiple applications for CODA in the Belgian version. |
| CH - SwitzerlandID | Title |
| — | — |
| 404809 | “You cannot change the VAT product posting group” error message when trying to change the Shipment Date in a sales order with prepayments in the Swiss version. |
| DE - GermanyID | Title |
| — | — |
| 403111 | Only the start date is passed to the date filter on PAG 474 when PAG 474 is opened from part of the ELSTER extension in the German version. |
| ES - Spain ID | Title |
| — | — |
| 402592 | “Factura duplicada” error in SII when posting multiple invoices sent to SII in the Spanish version. |
| 403106 | An operation is not declared in report 349, but is declared correctly in SII, because of an intracommunity sale for a French customer with Spanish address in the Spanish version. |
| 403927 | Remaining unrealized base and remaining unrealized amount are left open in the VAT entries after applying VAT cash payments using Unrealized VAT Type as Percentage in the Spanish version. |
| FI - Finland ID | Title |
| — | — |
| 400692 | The bank reference is not marked with 001 after being imported in the Finnish version. |
| IT - ItalyID | Title |
| — | — |
| 395832 | The withholding tax is not calculated correctly when the vendor bill is issued for a purchase invoice partially applied in the Italian version. |
| 404686 | The Closed by Entry No. doesn’t work correctly in VAT entries after running close and post VAT settlement in the Italian version. |
| 404191 | The CodiceFornitura element doesn’t export the correct value in XML file for the Periodic VAT payment Communication in the Italian version. |
| MX - MexicoID | Title |
| — | — |
| 403504 | The Operation type is not the default in purchase documents as outlined in the tooltips in the Mexican version. |
| NL - Netherlands ID | Title |
| — | — |
| 405527 | The revenue for a non-EU Countries appears on the ICP declaration in the Dutch version. |
| Regulatory features****Local regulatory features GB - United KingdomID | Title |
| — | — |
| 404260 | The fraud prevention headers can be specified automatically without interaction with user in the British version. |
| IT - ItalyID | Title |
| — | — |
| 404972 | The Tax Authority Doc. No. field should be enlarged in the Italian version. |
| NO - NorwayID | Title |
| — | — |
| 405032 | Improvements for SAF-T in the Norwegian version. |
Resolution
| How to obtain the Microsoft Dynamics 365 Business Central Spring 2019 filesThis update is available for manual download and installation from the Microsoft Download Center.Cumulative update CU 26 for Microsoft Dynamics 365 Business Central Spring 2019 Update on-premisesWhich hotfix package to downloadThis cumulative update has multiple hotfix packages. Select and download one of the following packages depending on the country version of your Microsoft Dynamics 365 Business Central Spring 2019 database.Country | Hotfix package |
|---|---|
| AT - Austria | Download the CU 26 Dynamics 365 Business Central Spring 2019 AT package |
| AU - Australia | Download the CU 26 Dynamics 365 Business Central Spring 2019 AU package |
| BE - Belgium | Download the CU 26 Dynamics 365 Business Central Spring 2019 BE package |
| CH - Switzerland | Download the CU 26 Dynamics 365 Business Central Spring 2019 CH package |
| CZ- Czech | Download the CU 26 Dynamics 365 Business Central Spring 2019 CZ package |
| DE - Germany | Download the CU 26 Dynamics 365 Business Central Spring 2019 DE package |
| DK - Denmark | Download the CU 26 Dynamics 365 Business Central Spring 2019 DK package |
| ES - Spain | Download the CU 26 Dynamics 365 Business Central Spring 2019 ES package |
| FI - Finland | Download the CU 26 Dynamics 365 Business Central Spring 2019 FI package |
| FR - France | Download the CU 26 Dynamics 365 Business Central Spring 2019 FR package |
| GB - United Kingdom | Download the CU 26 Dynamics 365 Business Central Spring 2019 GB package |
| IS - Iceland | Download the CU 26 Dynamics 365 Business Central Spring 2019 IS package |
| IT - Italy | Download the CU 26 Dynamics 365 Business Central Spring 2019 IT package |
| NA - North America | Download the CU 26 Dynamics 365 Business Central Spring 2019 NA package |
| NL - Netherlands | Download the CU 26 Dynamics 365 Business Central Spring 2019 NL package |
| NO - Norway | Download the CU 26 Dynamics 365 Business Central Spring 2019 NO package |
| NZ - New Zealand | Download the CU 26 Dynamics 365 Business Central Spring 2019 NZ package |
| RU - Russia | Download the CU 26 Dynamics 365 Business Central Spring 2019 RU package |
| SE - Sweden | Download the CU 26 Dynamics 365 Business Central Spring 2019 SE package |
| All other countries | Download the CU 26 Dynamics 365 Business Central Spring 2019 W1 package |
| How to install a Microsoft Dynamics 365 Business Central Spring 2019 cumulative updateSee How to install a Microsoft Dynamics 365 Business Central Spring 2019 cumulative update.PrerequisitesYou must have Microsoft Dynamics 365 Business Central Spring 2019 installed to apply this hotfix. |
More information
See more information about software update terminology and Microsoft Dynamics 365 Business Central Spring 2019.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the “Applies to” section.
Related
mscve
mscve
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
2021-08-10 07:00:00
mskb
mskb
cve
cve
CVE-2021-36946
2021-08-12 18:15:00
prion
prion
Cross site scripting
2021-08-12 18:15:00
nessus
nessus
Security Updates for Microsoft Dynamics 365 Business Central (August 2021)
2021-08-12 00:00:00
Security Updates for Microsoft Dynamics NAV (August 2021)
2021-08-12 00:00:00
Security Updates for Microsoft Dynamics 365 (on-premises) (August 2021)
2021-08-12 00:00:00
kaspersky
kaspersky
KLA12260 Multiple vulnerabilities in Microsoft Dynamics
2021-08-10 00:00:00
qualysblog
qualysblog
rapid7blog
rapid7blog
Patch Tuesday - August 2021
2021-08-11 03:19:33
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
6 Medium
AI Score
Confidence
High
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
19.0%
Related for KB5005370