Lucene search
MicrosoftKB5021002HistoryNov 08, 2022 - 8:00 a.m.
Update 20.7 for Microsoft Dynamics 365 Business Central (on-premises) 2022 Release Wave 1 (Application Build 20.7.48483, Platform Build 20.0.48457)
2022-11-0808:00:00
Microsoft
support.microsoft.com
79
4.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
4.8 Medium
AI Score
Confidence
High
1.7 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
MULTIPLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:M/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
69.8%
Update 20.7 for Microsoft Dynamics 365 Business Central (on-premises) 2022 Release Wave 1 (Application Build 20.7.48483, Platform Build 20.0.48457)
Overview
This update replaces previously released updates. You should always install the latest update. This update also fixes an information disclosure vulnerability. For more information, see CVE-2022-41066.After you install this hotfix, you might have to update your license to gain access to new objects that are included in this or a previous update. (This applies only to customer licenses.)For a list of updates that were released for Microsoft Dynamics 365 Business Central 2022 Release Wave 1, see released updates for Microsoft Dynamics 365 Business Central 2022 Release Wave 1. Updates are intended for new and existing customers who are running Microsoft Dynamics Released Updates for Microsoft Dynamics 365 Business Central 2022 Release Wave 1.ImportantWe recommend that you contact your Microsoft Dynamics Partner before you install hotfixes or updates. It is important to verify that your environment is compatible with the hotfixes or updates that will be installed. A hotfix or update may cause interoperability issues with customizations and third-party products that work together with your Microsoft Dynamics 365 Business Central solution.
Problems that are resolved in this update
| The following problems are resolved in this update.Platform hotfixesID | Title |
|---|---|
| 450114 | The Filter Reset action doesn’t work on the Purchase Price List. |
| 450325 | Filter Pane error caused by blank captions. |
| 449300 | Controls overlap and are not displayed as expected with properties on fields that have ShowMandatory and GridLayout. |
| 450703 | Count and IsEmpty return wrong results when filtering on primary key fields and any other fields if a cached record does not have the other fields loaded. |
| 449491 | FactBox status doesn’t maintain when navigating back. |
| 450882 | Fix the issue with ODATA Post and ODATA Batch operations on page extensions with the AutoSplitKey property enabled. |
| 449948 | The GetUrl function provides invalid URLs when the record filter contains an ampersand. |
| 450902 | Improve the performance of inspecting Global variables when debugging. |
| 450328 | Lookup results don’t react to keyboard events when using the Japanese input method. |
| 452415 | Sessions may fail to open when trying to get Help URLs. |
| 449087 | Traces are emitted even if the TraceLevel option is set to Off. |
| 451279 | The server starts extra transactions on the application database. |
| 448540 | Two page extension actions that have the same action group and name only execute the last deployed extension code. |
| 451234 | Unable to load the VAT Audit report. |
| 443334 | Users can add parts not in the license through Personalization. |
| Application hotfixesID | Title |
| — | — |
| 447956 | Error when inserting the customer or vendor name in a Sales or Purchase invoice. |
| 450221 | The Bank Account Ledger Entries are not updated automatically in the Bank Account Reconciliation when posting a General Journal. |
| 441242 | Applies-to IDs are removed when copying lines to a journal. |
| 441558 | The Document No. on Payment Journals is different from that on Suggest Vendor Payments even if the New Doc. No. per Line option is set as FALSE. |
| 442483 | Dimension values are mixed up when using the dimension value filter. |
| 443405 | The information in the Exchange Rate Adjustment Register is incorrect because the Exchange Rate Adjustment Register No. field is not filled in Detailed Entries. |
| 444049 | Update tooltips and captions to differenciate the Profit (LCY) in a Customer card from the Profit (LCY) on the Customer Sales page. |
| 447812 | The column header is printed incorrectly in the Aged Accounts Receivable and Payable report when the Heading Type is Date Interval. |
| 447647 | The VAT Amount (LCY) is not filled in general journal lines with Full VAT and Currency. |
| 452281 | The Renumber Document function doesn’t work as expected if the Payment Journal Lines don’t have Balance Accounts. |
| 438528 | “Positive must be equal to ‘No’ in Item Ledger Entry: Entry No.=1265. Current value is ‘Yes’” error when trying to revert consumption of an item linked to a Job and with No. Series. |
| 442877 | Transfer orders with direct transfers create lines in the Transfer Shipment Header instead of the Direct Transfer Header. |
| 443870 | The quantity is overridden by the requisition worksheet when handling item tracking with a sales order in the frozen zone. |
| 445426 | Assembly lines are removed by the Refresh Lines action when the assembly order status is released. |
| 451161 | It’s possible to get in inventory for items with the same lot and different expiration dates when dealing with posted assembly orders and the cancel button. |
| 451494 | Item Type is set to Inventory when creating an item from a Catalog Item with Type setting to Non-Inventory using the Item Template. |
| 451745 | “Attempted to divide by zero.” error message when running Calculate Plan in the Order Planning worksheet for assembly lines. |
| 438731 | “Cannot match item tracking” error message when posting an Inventory Pick after assigning an incorrect serial number. |
| 445152 | The Unit Cost (LCY) is updated incorrectly when a posting contains a Job with a different currency and exchange rates from the local information. |
| 448582 | The value on the Sales Job Price list is validated incorrectly. |
| 451524 | Job task lines are bold. |
| 443701 | Saturday and Sunday columns doesn’t show by default to approve the time on the Time Sheet Manager page. |
| 452315 | The calculation of Rolled up Material Cost is different in Standard Cost Worksheets and Cost Shares. |
| 453224 | Unable to convert a sales quote to a sales order for an assembly item with the BOM exploded. |
| 443557 | The Header Dimension is deleted in a purchase order when selecting the ship-to location. |
| 440630 | The Applies-to ID isn’t removed after receiving an error during the Create Payment routine. |
| 448829 | The purchase price list doesn’t work as expected in a job journal. |
| 450914 | Issue with direct posting check for system created entries in the Purchase Document Test report. |
| 451532 | The Incoming Document is not visible in Factbox in the Posted Purchase Invoice when selecting from the Purchase Order. |
| 444775 | Payment Method Code is not populated on Customer and Vendor Ledger Entries for Prepayment Invoices. |
| 448855 | The numbering is incorrect in Sales Credit Memos. |
| 448998 | “Invoice Disc. Code must be filled in. Enter a value.” error message when trying to delete an Invoice Disc. Code from the Customer Template. |
| 449018 | Time stamps of attachments change when converting sales quotes into sales orders. |
| 447086 | The VAT Clause is printed but not translated when printing a sales invoice. |
| 451343 | Incorrect results in the Customer Balance to Date report when selecting “Show entries with Zero Balance”. |
| 451669 | The result is incorrect if demand forecast entries are reversed or deleted when dealing with demand forecast and item availability by event. |
| 445492 | “There is nothing to create. Some items were not included in the pick due to their expiration date.” error message when creating an Inventory Pick in the Production Order even if there are other components available for picking. |
| 451173 | Shelf No. from Item is incorrect in the Pick List. |
| Local application hotfixes****APACID | Title |
| — | — |
| 448135 | WHT posting group codes must be indicated for comment lines on the Purchase Invoice page in the APAC version. |
| CA - CanadaID | Title |
| — | — |
| 436713 | Gen. Prod. Posting Group validation error when using prepayments in Purchase Orders in the Canadian version. |
| 445502 | The Tax Amount on the Pro Forma Invoice does not match the Tax Amount in the Sales Header in the Canadian version. |
| CH - SwitzerlandID | Title |
| — | — |
| 437930 | The Italian transaction is missing in the payment reconciliation journal in the Swiss version. |
| CZ - CzechiaID | Title |
| — | — |
| 451329 | The Net Change and Balance after Posting fields are missing in the reconciliation in the Czech version. |
| 451538 | Error occurs when creating a cash document in the Czech version. |
| 450313 | The VAT Registration No. does not change correctly when changing the Sell-to Customer No. in a sales invoice in the Czech version. |
| 451578 | The option to check, apply and unapply customer entries or vendor entries is missing in the Advance Letter in the Czech version. |
| 452573 | Issue with the Turnover Report by Global Dimensions in the Czech version. |
| ES - SpainID | Title |
| — | — |
| 447668 | Documents in Pending status are missing in the Spanish version. |
| 449802 | “Codigo[4102].El XML no cumple el esquema.Falta informar campo obligatorio: PrestacionServicios” error message in SII when posting an invoice for an EU customer with two different Non-taxable Types in different lines and EU Services in the Spanish version. |
| 441089 | Individual Credit Memos of type S, I and A reported as single operation of the period in the Make 349 Declaration report are taking the wrong positions in the Spanish version. |
| 452285 | The Pay-at Code field is not considered in the account in the Spanish version. |
| FI - FinlandID | Title |
| — | — |
| 448616 | Options are mismatched in SEPA in the Finnish version. |
| GB - United KingdomID | Title |
| — | — |
| 450221 | The Bank Account Ledger Entries are not updated automatically in the Bank Account Reconciliation when posting a General Journal in the British version. |
| IT - ItalyID | Title |
| — | — |
| 453416 | The electronic invoice file is validated incorrectly if a customer name has more than 80 characters in the Italian version. |
| MX - MexicoID | Title |
| — | — |
| 436713 | Gen. Prod. Posting Group validation error when using prepayments in Purchase Orders in the Mexican version. |
| 451001 | The exchange rate is mapped from the invoice instead of the payment complement in the XML when registering a payment complement in the Mexican version. |
| 452532 | Issues with the calculation or the decimals exist in payment complement used to pay multiple invoices in the Mexican version. |
| 452537 | Error message when requesting the stamp for a payment complement of a payment in Mexican pesos (LCY) for an invoice registered in USD in the Mexican version. |
| 452252 | Error message in the payment complement for the invoice in USD in the Mexican version. |
| NL - NetherlandsID | Title |
| — | — |
| 452237 | The Original Pmt. Disc. Possible is suggested instead of the Remaining Pmt. Disc. Possible in the Telebank Proposal in the Dutch version. |
| 451333 | The Transaction Type should not be mandatory for Receipt lines in the Intrastat Journal report or the Intrastat Declaration File and Checklist report in the Dutch version. |
| 450732 | The Transaction Type should not be mandatory for Shipment lines in the Intrastat Journal report in the Dutch version. |
| 445430 | Dimensions Priority is ignored in CBG Statement Line in the Dutch version. |
| NO - NorwayID | Title |
| — | — |
| 453253 | Bank Account tags should be exported with a different structure in the SAF-T file if there is an IBAN associated in the Norwegian version. |
| US - United StatesID | Title |
| — | — |
| 436713 | Gen. Prod. Posting Group validation error when using prepayments in Purchase Orders in the United States version. |
| 445502 | The Tax Amount on the Pro Forma Invoice does not match the Tax Amount in the Sales Header in the United States version. |
| Regulatory featuresID | Title |
| — | — |
| 435889 | The Person field is added to the Customer and Vendor table that is used for SEPA, instead of the Partner Type field. |
| 436863 | Update the Intrastat Checklist report. |
| 436886 | Update the Intrastat Form report. |
| Local regulatory features****BE - BelgiumID | Title |
| — | — |
| 450383 | Vendor Name is showing as a column in the EB Payment Journal in the Belgian version. |
| US - United StatesID | Title |
| — | — |
| 449868 | Implement IRS 1096 Form in the United States version. |
Resolution
How to obtain the Microsoft Dynamics 365 Business Central 2022 Release Wave 1 files
This update is available for manual download and installation from the Microsoft Download Center.Update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1
Which hotfix package to download
| This update has multiple hotfix packages. Select and download one of the following packages depending on the country version of your Microsoft Dynamics 365 Business Central 2022 database.Country | Hotfix package |
|---|---|
| AT - Austria | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 AT package |
| AU - Australia | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 AU package |
| BE - Belgium | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 BE package |
| CA - Canada | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 CA package |
| CH - Switzerland | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 CH package |
| CZ- Czechia | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 CZ package |
| DE - Germany | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 DE package |
| DK - Denmark | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 DK package |
| ES - Spain | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 ES package |
| FI - Finland | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 FI package |
| FR - France | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 FR package |
| GB - United Kingdom | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 UK package |
| IN - India | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 IN package |
| IS - Iceland | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 IS package |
| IT - Italy | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 IT package |
| MX - Mexico | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 MX package |
| NL - Netherlands | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 NL package |
| NO - Norway | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 NO package |
| NZ - New Zealand | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 NZ package |
| RU - Russia | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 RU package |
| SE - Sweden | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 SE package |
| US - United States | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 US package |
| All other countries | Download update 20.7 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 W1 package |
How to install a Microsoft Dynamics 365 Business Central on-premises 2022 Release Wave 1 update
See How to install a Microsoft Dynamics 365 Business Central 2022 Release Wave 1 update .
Prerequisites
You must have Microsoft Dynamics 365 Business Central 2022 Release Wave 1 installed to apply this hotfix.
More information
See more information about software update terminology and Microsoft Dynamics 365 Business Central 2022 Release Wave 1 .
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the “Applies to” section.
Related
prion
prion
Information disclosure
2022-11-09 22:15:00
mscve
mscve
Microsoft Business Central Information Disclosure Vulnerability
2022-11-08 08:00:00
mskb
mskb
Cumulative Update 41 for Microsoft Dynamics 365 Business Central April'19 on-premises (Application Build 14.42.49347, Platform Build 14.0.49339)
2022-11-08 08:00:00
kaspersky
kaspersky
KLA20041 OSI vulnerability in Microsoft Dynamics
2022-11-08 00:00:00
nessus
nessus
Security Updates for Microsoft Dynamics 365 Business Central (November 2022)
2022-11-10 00:00:00
cve
cve
CVE-2022-41066
2022-11-09 22:15:00
rapid7blog
rapid7blog
Patch Tuesday - November 2022
2022-11-08 20:02:57
4.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
4.8 Medium
AI Score
Confidence
High
1.7 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
MULTIPLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:M/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
69.8%
Related for KB5021002