Dynamics 365 Business Central (Microsoft) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 23 known versions, newest CVE from 2026-05-12. Vendor: Microsoft.
CVEs of Dynamics 365 Business Central
- CVE-2026-40417 - CVSS 7.8 (high), 2026-05-12: Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.
- CVE-2024-43460 - CVSS 8.8 (high), 2024-09-17: Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network.
- CVE-2024-38225 - CVSS 9.8 (critical), 2024-09-10: Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
- CVE-2024-35248 - CVSS 7.3 (high), 2024-06-11: Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
- CVE-2024-35249 - CVSS 8.8 (high), 2024-06-11: Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
- CVE-2024-21380 - CVSS 8 (high), 2024-02-13: Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
- CVE-2023-38167 - CVSS 7.2 (high), 2023-08-08: Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
- CVE-2022-41127 - CVSS 8.5 (high), 2022-12-13: Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
- CVE-2021-40440 - CVSS 5.4 (medium), 2021-09-15: Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
- CVE-2021-36946 - CVSS 5.4 (medium), 2021-08-12: Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
- CVE-2021-34474 - CVSS 8 (high), 2021-07-14: Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
- CVE-2021-1724 - CVSS 6.1 (medium), 2021-02-25: Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
- CVE-2020-1022 - CVSS 8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
- CVE-2020-1018 - CVSS 7.5 (high), 2020-04-15: An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when…
- CVE-2020-0905 - CVSS 8 (high), 2020-03-12: An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
