Known vulnerabilities in Microsoft Dynamics 365 Business Central 2023 Release Wave 1
Vendor:
Microsoft
Software:
Microsoft Dynamics 365 Business Central
Version:
2023 Release Wave 1
Software CPE:
cpe:2.3:a:microsoft:microsoft_dynamics_365_business_central:*:*:*:*:*:*:*:*
Website:
https://www.microsoft.com
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9
Vulnerabilities by Severity
26.0.50788
28.0.50938
27.0.50789
28.1
26.12
27.6
25.18
Wave 1 2024 – Update 24.12
2023 Wave 2 – Update 23.18
2024 Wave 2 – Update 25.6
2025 Wave 1 – Update 26.0
2024 Release Wave 1
2023 Release Wave 2
2023 Release Wave 1
2019 Release Wave 2 (On-Premise)
2022 Release Wave 2
2021 Release Wave 2
2021 Release Wave 1
2020 Release Wave 2
2020 Release Wave 1
2022 Release Wave 1
2020 Release Wave 2 – Update 17.10
2021 Release Wave 1 - Update 18.5
2019 Spring Update
2020 Release Wave 2 - Update 17.9
2020 Release Wave 1 - Update 16.15
2020 Release Wave 1 - Update 16.14
2020 Release Wave 2 - Update 17.8
2021 Release Wave 1 - Update 18.3
-
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU97090 - Improper Authentication CVE-2024-38225 |
CWE-287 | Medium | - | 10.09.2024 |
SB20240910130 |
||
| #VU91719 - Improper Authentication CVE-2024-35248 |
CWE-287 | Medium | - | 11.06.2024 |
SB20240611244 |
||
| #VU91718 - Deserialization of Untrusted Data CVE-2024-35249 |
CWE-502 | Medium | - | 11.06.2024 |
SB20240611244 |
||
| #VU86419 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-21380 |
CWE-362 | Medium | - | 13.02.2024 |
SB2024021348 |
||
| #VU79152 - Permissions, Privileges, and Access Controls CVE-2023-38167 |
CWE-264 | Low | - | 08.08.2023 |
SB2023080868 |