Product
12 published CVES affecting Microsoft Dynamics NAV 2018, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.
Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.
External control of file name or path in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.
Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
Microsoft Dynamics Business Central Information Disclosure Vulnerability
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information t...
An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.