Security Updates for Microsoft Dynamics 365 Business Central (February 2024)

The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an information disclosure vulnerability. A remote, authenticated attacker, by inducing another user to access a compromised URL and winning a race condition, can to read, modify and...

CVE-2024-21380

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability...

CVE-2024-21380 Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

...

CVE-2024-21380

CVE-2024-21380 is a Microsoft Dynamics 365 Business Central/NAV information disclosure vulnerability. The CVSS v3.1 score is 8.0 (Network, high attack complexity; privileges required: Low; user interaction required; changed scope). It can lead to access to sensitive data and potential data integr...

CVE-2024-21380 Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

...

KLA63963 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microso...