Lucene search
HistorySep 17, 2024 - 7:15 p.m.
CVE-2024-43460
improper authorization
dynamics 365
business central
authenticated attacker
elevate privileges
network vulnerability
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
16.8%
Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network.
Affected configurations
Node
microsoftdynamics_365_business_centralMatch--
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | dynamics_365_business_central | - | cpe:2.3:a:microsoft:dynamics_365_business_central:-:-:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
kaspersky
kaspersky
KLA73440 PE vulnerability in Microsoft Dynamics
2024-09-17 00:00:00
cvelist
cvelist
mscve
mscve
Dynamics 365 Business Central Elevation of Privilege Vulnerability
2024-09-17 07:00:00
cve
cve
CVE-2024-43460
2024-09-17 19:15:27
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
16.8%
Related for NVD:CVE-2024-43460