CVE-2024-21380

CVE-2024-21380 is a Microsoft Dynamics 365 Business Central/NAV information disclosure vulnerability. The CVSS v3.1 score is 8.0 (Network, high attack complexity; privileges required: Low; user interaction required; changed scope). It can lead to access to sensitive data and potential data integr...

CVE-2023-38167

CVE-2023-38167 is an elevation-of-privilege vulnerability affecting Microsoft Dynamics 365 Business Central (2023 Release Wave 1) as documented by multiple sources. The issue is reported as enabling an attacker with high privileges to obtain elevated rights (impact: high; CVSS 3.1: AV:N/AC:L/PR:H...

CVE-2024-38225

CVE-2024-38225 affects Microsoft Dynamics 365 Business Central with an Elevation of Privilege vulnerability. Connected sources confirm impact and remediation via Microsoft updates (Wave 1 24.4, Wave 2 23.10). CVSS details in NVD/Microsoft advisories show high/critical scores and network/low compl...

CVE-2024-35248

Summary of CVE-2024-35248 context : This is an Elevation of Privilege vulnerability reported in Microsoft Dynamics 365 Business Central . The entry is corroborated by multiple sources in the Connected documents including official MS security guidance and update references. Several Microsoft Knowl...

CVE-2024-35249

CVE-2024-35249 corresponds to a remote code execution vulnerability in Microsoft Dynamics 365 Business Central. Based on the provided documents, the issue affects Dynamics 365 Business Central (no specific vulnerable module/version is named in the sources beyond the product family). The CVE is ra...