CVE-2021-40440
MediumCVSS 5.4Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
Cross-site scripting (XSS) vulnerability in Microsoft Dynamics Business Central. Allows injection of malicious script into the application.
Risk Assessment
An attacker can steal user data, hijack sessions, or spread malicious content within the organization.
Recommendation
Apply patches provided by Microsoft for Dynamics Business Central and consider additional security measures such as input filtering.
Other vulnerabilities in Microsoft Dynamics Business Central
See all- CVE-2022-41066Medium
Information disclosure vulnerability in Microsoft Dynamics Business Central. Could allow an attacker to read sensitive business data.
- CVE-2021-36946Medium
Cross-site scripting (XSS) vulnerability in Microsoft Dynamics Business Central. Allows injection of malicious script into the application.
Original NVD description (English source)
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS