CVE Catalog
CVE-2021-40440
MediumCVSS 5.4Exploitation Probability (EPSS)
Elevated risk0.98%
59th percentile - higher than 59% of all known CVEs
Summary
Cross-site scripting (XSS) vulnerability in Microsoft Dynamics Business Central. Allows injection of malicious script into the application.
Risk Assessment
An attacker can steal user data, hijack sessions, or spread malicious content within the organization.
Recommendation
Apply patches provided by Microsoft for Dynamics Business Central and consider additional security measures such as input filtering.
Original NVD description (English source)
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability