CVE-2020-1018: vulnerability in Microsoft Dynamics 365 Business Central 2019…
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 6.3%
An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a masked field.The security update addresses the vulnerability by updating the rendering engine the Windows client to properly detect masked fields and render the content as masked., aka 'Microsoft Dynamics Business Central/NAV Information Disclosure'.
Affected products
Microsoft · Dynamics 365 Business Central 2019 Spring UpdateMicrosoft · Microsoft Dynamics 365 BC On PremiseMicrosoft · Microsoft Dynamics NAV 2015Microsoft · Microsoft Dynamics NAV 2016Microsoft · Microsoft Dynamics NAV 2017Microsoft · Microsoft Dynamics NAV 2018Related CVEs — Microsoft Dynamics 365 Business Central 2019…
In the same product, most dangerous first.
CVE-2020-0905—CVE-2020-0905EPSS 10.8%CVE-2020-1022—CVE-2020-1022EPSS 6.8%CVE-2020-17133MEDIUMMicrosoft Dynamics Business Central/NAV Information Disclosure VulnerabilityEPSS 3.8%CVE-2022-41127HIGHMicrosoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution VulnerabilityEPSS 1.7%CVE-2021-1724MEDIUMMicrosoft Dynamics Business Central Cross-site Scripting VulnerabilityEPSS 1.3%