CVE-2022-41127: Undefined Security Weakness

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central On Premises Remote Code Execution Vulnerability...

PT-2022-5968 · Microsoft · Dynamics Nav +1

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central On Premises affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Dynamics 365 Business Central and Microsoft Dynamic...

KLA20124 ACE vulnerability in Microsoft Dynamics

Code execution vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2022-41127 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Dynamics-365 CVE list CVE-2022-41127...

CVE-2022-41127

CVE-2022-41127 affects Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central On‑Premises. Descriptions in connected docs confirm a remote code execution vulnerability and that Microsoft released updates to fix it (e.g., Update 16.19 for BC 2020 Wave 1, Update 17.17 for BC 2020 Wave 2...

Cumulative Update 58 for Microsoft Dynamics NAV 2018 (Build 49345)

None None...

PT-2022-5471 · Microsoft · Dynamics 365 Business Central +1

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 Business Central affected versions not specified Microsoft Dynamics NAV affected versions not specified Description: The issue is related to insufficient protection of sensitive data in Microsoft Dynamics 365 Business...

PT-2021-7043 · Microsoft · Dynamics Nav +1

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics Business Central affected versions not specified Microsoft Dynamics NAV affected versions not specified Description: The issue is related to a cross-site scripting vulnerability in Microsoft Dynamics Business Central and...

Security Updates for Microsoft Dynamics NAV (August 2021)

The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by a Cross-site Scripting Vulnerability. Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenabl...

Cumulative Update 43 for Microsoft Dynamics NAV 2018 (Build 47562)

None None...

Cumulative Update 56 for Microsoft Dynamics NAV 2017 (Build 30601)

None None...

Security Updates for Microsoft Dynamics NAV (Dec 2020)

The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by an information disclosure vulnerability in the Document Service table due to the Password field not being masked. An authenticated, remote attacker can exploit this, by inspecting as a system user, to...

Security Updates for Microsoft Dynamics NAV (Feb 2021)

The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by a cross site scripting XSS vulnerability due to improper validation of user-supplied input. An authenticated attacker can exploit this, by entering specially crafted URLs in the Links and Notes feature,...

XSS attack in Links and Notes feature in Microsoft Dynamics NAV (KB4602915)

None None...

Microsoft Dynamics Cross-Site Scripting Vulnerability

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management, and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics. The following...

KLA12070 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft Dataverse can be exploited...

Microsoft Dynamics NAV Information Disclosure

The vulnerability of the integrated Microsoft Dynamics NAV enterprise management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

CVE-2020-17133

CVE-2020-17133 is a Microsoft Dynamics Business Central/NAV information-disclosure vulnerability. The root cause is that the Password field in the Document Service table is not masked, which could allow an authenticated remote attacker (as a system user) to reveal passwords. Public references in ...

Password is not masked in the Document Service table in Microsoft Dynamics NAV 2015 and NAV 2013 R2

Password is not masked in the Document Service table in Microsoft Dynamics NAV 2015 and NAV 2013 R2 Symptoms In Microsoft Dynamics NAV 2015 and Microsoft Dynamics NAV 2013 R2, the Password field is not masked in the Document Service table. Therefore, the field is visible during inspection. To lea...

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Microsoft Dynamics Business Central is an enterprise resource planning system from Microsoft. The system includes features such as financial management, project management, and supply chain management. An information disclosure vulnerability exists in Microsoft Dynamics Business Central. The...

Microsoft Dynamics 365 Operational Data Access

The vulnerability of the Microsoft Dynamics 365 resource planning software and the integrated enterprise management system Microsoft Dynamics NAV lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access...