title: Dynamics Business Central Remote Code Execution Vulnerability
description: Dynamics Business Central Remote Code Execution Vulnerability
problem types: Remote Code Execution
affected:
{
vendor: Microsoft
product: Microsoft Dynamics 365 Business Central 2020 Release Wave 1 - Update 16.14
cpes: cpe:2.3:a:microsoft:dynamics_365_business_central:2020:release_wave_1:*:*:*:*:*:*
platforms: Unknown
versions:
version: 16.0, lessThan: Application: 16.14.27266, Platform: 16.0.27253, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft Dynamics 365 Business Central 2020 Release Wave 2 - Update 17.8
cpes: cpe:2.3:a:microsoft:dynamics_365_business_central:2020:release_wave_2:*:*:*:*:*:*
platforms: Unknown
versions:
version: 17.0, lessThan: Application: 17.8.27267, Platform: 17.0.27235, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft Dynamics 365 Business Central 2021 Release Wave 1 - Update 18.3
cpes: cpe:2.3:a:microsoft:dynamics_365_business_central:2021:release_wave_1:*:*:*:*:*:*
platforms: Unknown
versions:
version: 18.0, lessThan: Application: 18.3.27480, Platform: 18.0.27469, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: HIGH
baseScore: 8
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
]