CVE-2020-1022

CWE-74CWE-1022CWE-2665 documents5 sources
Severity
8.0HIGH
EPSS
39.2%
top 2.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Microsoft Dynamics 365 Business Central 2019 Release Wave 2 (on-premise)Microsoft Dynamics 365 Business Central 2019 Spring UpdateMicrosoft Microsoft Dynamics 365 BC ON Premise+7 more
Timeline
PublishedApr 15
Latest updateDec 22

Description

A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 2.1 | Impact: 5.9

Affected Packages10 packages

▶NVDmicrosoft/dynamics_nav5 versions+4

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

3
GHSA
text_helpers uses web link to untrusted target with window.opener access↗2022-12-22
▶
GHSA
GHSA-rq3c-gxfr-p3c8: A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerabilit↗2022-05-24
▶
CVEList
CVE-2020-1022: A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerabilit↗2020-04-15
▶

📋Vendor Advisories

1
Microsoft
Dynamics Business Central Remote Code Execution Vulnerability↗2020-04-14
▶
CVE-2020-1022 (HIGH CVSS 8) | A remote code execution vulnerabili | cvebase.io