CVE-2021-34474
HighCVSS 8.0Exploitation Probability (EPSS)
High risk77th percentile - higher than 77% of all known CVEs
Summary
Remote Code Execution vulnerability in Microsoft Dynamics 365 Business Central. An attacker could exploit this vulnerability to execute arbitrary code in the context of the application.
Risk Assessment
The risk is that an attacker could gain unauthorized access to the Dynamics 365 system and perform malicious actions, potentially compromising business data integrity.
Recommendation
Apply the security updates provided by the vendor for Microsoft Dynamics 365 Business Central.
Other vulnerabilities in Microsoft Dynamics 365 Business Central
See all- CVE-2024-38225High
Elevation of privilege vulnerability in Microsoft Dynamics 365 Business Central. It allows an attacker to gain higher privileges.
- CVE-2024-35249High
A remote code execution vulnerability in Microsoft Dynamics 365 Business Central allows an attacker to execute arbitrary code in the context of the application. It requires authentication and user interaction.
- CVE-2024-35248High
A vulnerability in Microsoft Dynamics 365 Business Central allows elevation of privilege. An attacker could exploit this flaw to gain unauthorized access to system resources.
- CVE-2023-38167High
A vulnerability in Microsoft Dynamics 365 Business Central allows unauthorized users to elevate their privileges. Exploiting this flaw may lead to access to resources that the user should not have access to.
Original NVD description (English source)
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability