Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVE-2021-1724

6.1MEDIUM

Key Information:

Vendor: Microsoft
Status: Microsoft Dynamics Nav 2018; Microsoft Dynamics 365 Business Central 2020 Release Wave 1; Dynamics 365 Business Central 2019 Release Wave 2 (on-premise); Microsoft Dynamics Nav 2017
Vendor: CVE Published:; 25 February 2021

What is CVE-2021-1724?

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

Dynamics 365 Business Central 2019 Release Wave 2 (On-Premise) Unknown 15.0.0

Microsoft Dynamics 365 Business Central 2020 Release Wave 1 Unknown 16.0.0

Microsoft Dynamics 365 Business Central 2020 Release Wave 2 Unknown 17.0.0

Score:

6.1

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Adjacent Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet