CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability

...

CVE-2026-40375

CVE-2026-40375 affects Microsoft Dynamics Business Central. Missing authorization could allow an authorized attacker to disclose information over a network. The NVD records a CVSSv3.1 base score of 6.5 (MEDIUM) with Network impact, low attack complexity, and low privileges required; confidentiali...

CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability

...

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

Information disclosure

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability...

Privilege escalation

Microsoft Dynamics Business Central Elevation Of Privilege Vulnerability...

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses lies in improper code generation, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...

Cross site scripting

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability...

CVE-2021-40440 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

...

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

...

CVE-2021-36946

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability...

PT-2021-3915 · Microsoft · Dynamics Nav +2

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics Business Central affected versions not specified Microsoft Dynamics NAV affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365 Business...

Cross site scripting

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability...

CVE-2021-1724 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

...

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

...

CVE-2020-17133

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability...

CVE-2020-1022

A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'...

Remote code execution

A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'...

Information disclosure

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a mask...

CVE-2020-1018

CVE-2020-1018 concerns Microsoft Dynamics 365 Business Central/NAV on-premises where masked fields shown on a chart page are not properly hidden, exposing information that should be concealed. The info-disclosure vulnerability stems from the rendering of masked content in the Windows client; the ...