Dynamics 365 Business Central 2024
Monthly
Missing authorization controls in Microsoft Dynamics 365 Business Central enable authenticated network attackers to access sensitive business data beyond their permitted scope. Rooted in CWE-862 (Missing Authorization), the flaw affects multiple release waves spanning 2024 through 2026, with a CVSS 6.5 score reflecting high confidentiality impact at low attack complexity. No public exploit code is identified and CISA SSVC rates exploitation as none and non-automatable, though the high confidentiality impact warrants prompt patching for organizations with broad user bases.
Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
Missing authorization controls in Microsoft Dynamics 365 Business Central enable authenticated network attackers to access sensitive business data beyond their permitted scope. Rooted in CWE-862 (Missing Authorization), the flaw affects multiple release waves spanning 2024 through 2026, with a CVSS 6.5 score reflecting high confidentiality impact at low attack complexity. No public exploit code is identified and CISA SSVC rates exploitation as none and non-automatable, though the high confidentiality impact warrants prompt patching for organizations with broad user bases.
Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.