Microsoft Business Central Information Disclosure Vulnerability
CVE-2022-41066

4.4MEDIUM

Key Information:

Vendor: Microsoft
Status: Dynamics 365 Business Central Spring 2019 Update; Microsoft Dynamics 365 Business Central 2021 Release Wave 2; Microsoft Dynamics 365 Business Central 2022 Release Wave 1; Microsoft Dynamics 365 Business Central 2022 Release Wave 2
Vendor: CVE Published:; 9 November 2022

What is CVE-2022-41066?

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Dynamics 365 Business Central Spring 2019 Update 14.0.0 < 14.0.49339

Microsoft Dynamics 365 Business Central 2021 Release Wave 2 19.0.0 < 19.0.48446

Microsoft Dynamics 365 Business Central 2022 Release Wave 1 20.0.0 < 20.0.48457

Score:

4.4

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

CVE-2022-41066 Data