Microsoft Dynamics Nav vulnerabilities

9 known vulnerabilities affecting microsoft/dynamics_nav.

Total CVEs
9
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH4MEDIUM5

Vulnerabilities

Page 1 of 1
CVE-2022-41127HIGHCVSS 8.5v2016v2017+1 more2022-12-13
CVE-2022-41127 [HIGH] CVE-2022-41127: Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Executi Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
nvd
CVE-2022-41066MEDIUMCVSS 4.4v20182022-11-09
CVE-2022-41066 [MEDIUM] CVE-2022-41066: Microsoft Business Central Information Disclosure Vulnerability Microsoft Business Central Information Disclosure Vulnerability
nvd
CVE-2021-36946MEDIUMCVSS 5.4v2017v20182021-08-12
CVE-2021-36946 [MEDIUM] CWE-79 CVE-2021-36946: Microsoft Dynamics Business Central Cross-site Scripting Vulnerability Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
nvd
CVE-2021-1724MEDIUMCVSS 4.8v2015v2016+2 more2021-02-25
CVE-2021-1724 [MEDIUM] CWE-79 CVE-2021-1724: Microsoft Dynamics Business Central Cross-site Scripting Vulnerability Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
nvd
CVE-2020-17133MEDIUMCVSS 6.5v20152020-12-10
CVE-2020-17133 [MEDIUM] CVE-2020-17133: Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
nvd
CVE-2020-1018HIGHCVSS 7.5v2015v2016+2 more2020-04-15
CVE-2020-1018 [HIGH] CWE-200 CVE-2020-1018: An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premi An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a masked field.The security update addresses the vulnerability b
nvd
CVE-2020-1022HIGHCVSS 8.0v2013v2015+3 more2020-04-15
CVE-2020-1022 [HIGH] CVE-2020-1022: A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics B A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
nvd
CVE-2020-0905HIGHCVSS 8.0v2013v2015+3 more2020-03-12
CVE-2020-0905 [HIGH] CVE-2020-0905: An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
nvd
CVE-2018-8651MEDIUMCVSS 5.4v2016v20172018-12-12
CVE-2018-8651 [MEDIUM] CWE-79 CVE-2018-8651: A cross site scripting vulnerability exists when Microsoft Dynamics NAV does not properly sanitize a A cross site scripting vulnerability exists when Microsoft Dynamics NAV does not properly sanitize a specially crafted web request to an affected Dynamics NAV server, aka "Microsoft Dynamics NAV Cross Site Scripting Vulnerability." This affects Microsoft Dynamics NAV.
nvd