CVE-2021-40440 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

...

CVE-2021-40440

CVE-2021-40440 is a cross-site scripting (XSS) vulnerability affecting Microsoft Dynamics 365 Business Central (notably 2020 Release Wave 2 Update 17.10 and 2021 Release Wave 1 Update 18.5). The issue allows arbitrary script execution in the browser when visiting the Dynamics BC Control, as descr...

Vulnerability fixed in Microsoft Dynamics

Microsoft has fixed a vulnerability in Microsoft Dynamics Business Central Control. A malicious party could exploit the vulnerability to perform of a Cross-Site Scripting XSS attack. Such an attack can lead to the execution of arbitrary script code in the browser with which the application is...

KLA12287 XSS vulnerability in Microsoft Dynamics

A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to perform cross-site scripting attack. Original advisories CVE-2021-40440 Related products Microsoft-Dynamics-365 CVE list CVE-2021-40440 unknown KB list 5006076 5006075...