Security Updates for Microsoft Dynamics 365 Business Central (August 2023)

The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an escalation of privilege vulnerability. This vulnerability requires that the attacker already has high privileges to a security group on the tenet. Note that Nessus has not attempted ...

CVE-2023-38167

CVE-2023-38167 is an elevation-of-privilege vulnerability affecting Microsoft Dynamics 365 Business Central (2023 Release Wave 1) as documented by multiple sources. The issue is reported as enabling an attacker with high privileges to obtain elevated rights (impact: high; CVSS 3.1: AV:N/AC:L/PR:H...

CVE-2023-38167 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

...

KLA51711 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Dynamics Business Central can be exploited...