Microsoft
Microsoft Dynamics 365 Business Central: vulnerabilidades y CVE
Microsoft Dynamics 365 Business Central tiene 15 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE15
Últimos 12 meses1
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-40417 | Alta (7.8) | 0.30% | — | 12 may 2026 | Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally. |
| CVE-2024-43460 | Alta (8.8) | 0.71% | — | 17 sept 2024 | Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network. |
| CVE-2024-38225 | Crítica (9.8) | 1.4% | — | 10 sept 2024 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability |
| CVE-2024-35249 | Alta (8.8) | 3.4% | — | 11 jun 2024 | Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability |
| CVE-2024-35248 | Alta (7.3) | 0.95% | — | 11 jun 2024 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability |
| CVE-2024-21380 | Alta (8) | 1.7% | — | 13 feb 2024 | Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability |
| CVE-2023-38167 | Alta (7.2) | 1.4% | — | 8 ago 2023 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability |
| CVE-2022-41127 | Alta (8.5) | 1.6% | — | 13 dic 2022 | Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability |
| CVE-2021-40440 | Media (5.4) | 1.1% | — | 15 sept 2021 | Microsoft Dynamics Business Central Cross-site Scripting Vulnerability |
| CVE-2021-36946 | Media (5.4) | 1.0% | — | 12 ago 2021 | Microsoft Dynamics Business Central Cross-site Scripting Vulnerability |
| CVE-2021-34474 | Alta (7.2) | 2.2% | — | 14 jul 2021 | Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability |
| CVE-2021-1724 | Media (4.8) | 1.3% | — | 25 feb 2021 | Microsoft Dynamics Business Central Cross-site Scripting Vulnerability |
| CVE-2020-1022 | Alta (8) | 6.8% | — | 15 abr 2020 | A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'. |
| CVE-2020-1018 | Alta (7.5) | 6.3% | — | 15 abr 2020 | An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who… |
| CVE-2020-0905 | Alta (8) | 11% | — | 12 mar 2020 | An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.