CVE-2021-36946

Published: Aug 12, 2021

Modified: Aug 4, 2024

PUBLISHED

CVSS v3.1

5.4

MEDIUM

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

Vendor	Product	Versions
Microsoft	Microsoft Dynamics NAV 2017	affected `1.0 - < 30601`
Microsoft	Microsoft Dynamics NAV 2018	affected `1.0 - < 47562`
Microsoft	Dynamics 365 Business Central Spring 2019 Update	affected `14.0.0 - < Application Build 14.27.47563, Platform Build 14.0`
Microsoft	Microsoft Dynamics 365 Business Central 2020 Release Wave 2 - Update 17.9	affected `17.0 - < Application Build 17.9.28504, Platform Build 17.0.`
Microsoft	Microsoft Dynamics 365 Business Central 2020 Release Wave 1 - Update 16.15	affected `16.0 - < Application Build 16.15.28500, Platform Build 16.0`

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.