CVE-2023-38167
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk70th percentile - higher than 70% of all known CVEs
Summary
A vulnerability in Microsoft Dynamics 365 Business Central allows unauthorized users to elevate their privileges. Exploiting this flaw may lead to access to resources that the user should not have access to.
Risk Assessment
Organizations may be exposed to unauthorized access to sensitive data, potentially leading to serious security breaches and loss of customer trust.
Recommendation
It is recommended to update Microsoft Dynamics 365 Business Central to the latest version to patch this vulnerability and review user permissions.
Other vulnerabilities in Microsoft Dynamics 365 Business Central
See all- CVE-2024-38225High
Elevation of privilege vulnerability in Microsoft Dynamics 365 Business Central. It allows an attacker to gain higher privileges.
- CVE-2024-35249High
A remote code execution vulnerability in Microsoft Dynamics 365 Business Central allows an attacker to execute arbitrary code in the context of the application. It requires authentication and user interaction.
- CVE-2024-35248High
A vulnerability in Microsoft Dynamics 365 Business Central allows elevation of privilege. An attacker could exploit this flaw to gain unauthorized access to system resources.
- CVE-2021-34474High
Remote Code Execution vulnerability in Microsoft Dynamics 365 Business Central. An attacker could exploit this vulnerability to execute arbitrary code in the context of the application.
Original NVD description (English source)
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability