title: Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
description: Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
problem types: Spoofing
affected:
{
vendor: Microsoft
product: Microsoft Dynamics 365 Business Central 2020 Release Wave 2 – Update 17.10
cpes: cpe:2.3:a:microsoft:dynamics_365_business_central:2020:update_17.10:release_wave_2:*:*:*:*:*
platforms: Unknown
versions:
version: 17.0.0.0, lessThan: App Build 17.10.29463, Platform Build 17.0.29460, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft Dynamics 365 Business Central 2021 Release Wave 1 - Update 18.5
cpes: cpe:2.3:a:microsoft:dynamics_365_business_central:2021:update_18.5:release_wave_1:*:*:*:*:*
platforms: Unknown
versions:
version: 18.0.0.0, lessThan: App Build 18.5.29545, Platform Build 18.0.29486, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: MEDIUM
baseScore: 5.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
]