CVE-2022-41066
MediumCVSS 4.4Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
Information disclosure vulnerability in Microsoft Dynamics Business Central. Could allow an attacker to read sensitive business data.
Risk Assessment
Risk of exposing sensitive financial and operational data of the organization.
Recommendation
Update Microsoft Dynamics Business Central to the latest version with the security fix.
Other vulnerabilities in Microsoft Dynamics Business Central
See all- CVE-2021-40440Medium
Cross-site scripting (XSS) vulnerability in Microsoft Dynamics Business Central. Allows injection of malicious script into the application.
- CVE-2021-36946Medium
Cross-site scripting (XSS) vulnerability in Microsoft Dynamics Business Central. Allows injection of malicious script into the application.
Original NVD description (English source)
Microsoft Dynamics Business Central Information Disclosure Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS