CVE-2024-21380

Published: Feb 13, 2024

Modified: May 3, 2025

PUBLISHED

CVSS v3.1

8.0

HIGH

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

Vendor	Product	Versions
Microsoft	Microsoft Dynamics 365 Business Central 2022 Release Wave 2	affected `21.0.0 - < Application Build 21.16.63199, Platform Build 21.0`
Microsoft	Microsoft Dynamics 365 Business Central 2023 Release Wave 1	affected `22.0.0 - < Application Build 22.10.63195, Platform Build 22.0`
Microsoft	Microsoft Dynamics 365 Business Central 2023 Release Wave 2	affected `23.0.0 - < Application Build 23.4.15715, Platform Build 23.0.`

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.