CVE-2024-38225
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk69th percentile - higher than 69% of all known CVEs
Summary
Elevation of privilege vulnerability in Microsoft Dynamics 365 Business Central. It allows an attacker to gain higher privileges.
Risk Assessment
An attacker could gain unauthorized access to business data and administrative functions.
Recommendation
Apply security updates and restrict system access to authorized users only.
Other vulnerabilities in Microsoft Dynamics 365 Business Central
See all- CVE-2024-35249High
A remote code execution vulnerability in Microsoft Dynamics 365 Business Central allows an attacker to execute arbitrary code in the context of the application. It requires authentication and user interaction.
- CVE-2024-35248High
A vulnerability in Microsoft Dynamics 365 Business Central allows elevation of privilege. An attacker could exploit this flaw to gain unauthorized access to system resources.
- CVE-2023-38167High
A vulnerability in Microsoft Dynamics 365 Business Central allows unauthorized users to elevate their privileges. Exploiting this flaw may lead to access to resources that the user should not have access to.
- CVE-2021-34474High
Remote Code Execution vulnerability in Microsoft Dynamics 365 Business Central. An attacker could exploit this vulnerability to execute arbitrary code in the context of the application.
Original NVD description (English source)
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability