CVE-2020-0905 — Microsoft Dynamics 365 Business Central 2019 Release Wave 2 vulnerability

4 documents4 sources

Severity

8.0HIGHNVD

EPSS

32.9%

top 3.10%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Dynamics 365 Business Central 2019 Release Wave 2 Microsoft Dynamics 365 Business Central 2019 Spring Update Microsoft Dynamics 365 BC ON Premise +7 more

Timeline

PublishedMar 12

Latest updateMay 24

Description

An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 2.1 | Impact: 5.9

Affected Packages10 packages

▶NVDmicrosoft/dynamics_365_business_central2019

▶CVEListV5microsoft/dynamics_365_business_central_2019_spring_updateunspecified

▶CVEListV5microsoft/dynamics_365_business_central_2019_release_wave_2unspecified

▶NVDmicrosoft/dynamics_nav5 versions+4

▶CVEListV5microsoft/microsoft_dynamics_nav_2013unspecified

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-3xwp-cg99-2wx2: An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerabili↗2022-05-24

▶

CVEList

CVE-2020-0905: An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerabili↗2020-03-12

▶

📋Vendor Advisories

Microsoft

Dynamics Business Central Remote Code Execution Vulnerability↗2020-03-10

▶