Product
6 published CVES affecting Microsoft dynamics nav 2018, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.
Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.
External control of file name or path in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.
Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.