CVE-2024-35248
HighCVSS 7.3Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
A vulnerability in Microsoft Dynamics 365 Business Central allows elevation of privilege. An attacker could exploit this flaw to gain unauthorized access to system resources.
Risk Assessment
The risk involves potential privilege escalation by an attacker, which could lead to application compromise and access to sensitive business data.
Recommendation
It is recommended to immediately apply the security update provided by Microsoft for Dynamics 365 Business Central. Also monitor the system for unusual activity.
Other vulnerabilities in Microsoft Dynamics 365 Business Central
See all- CVE-2024-38225High
Elevation of privilege vulnerability in Microsoft Dynamics 365 Business Central. It allows an attacker to gain higher privileges.
- CVE-2024-35249High
A remote code execution vulnerability in Microsoft Dynamics 365 Business Central allows an attacker to execute arbitrary code in the context of the application. It requires authentication and user interaction.
- CVE-2023-38167High
A vulnerability in Microsoft Dynamics 365 Business Central allows unauthorized users to elevate their privileges. Exploiting this flaw may lead to access to resources that the user should not have access to.
- CVE-2021-34474High
Remote Code Execution vulnerability in Microsoft Dynamics 365 Business Central. An attacker could exploit this vulnerability to execute arbitrary code in the context of the application.
Original NVD description (English source)
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability