CVE-2020-1022: vulnerability in Microsoft Dynamics 365 Business Central 2019…
Published · Updated
Follow this CVE+ Monitor Microsoft Dynamics NAV+ Monitor Dynamics 365 Business Central 2019 Release Wave
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 6.8%
A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
Affected products
Microsoft · Dynamics 365 Business Central 2019 Release Wave 2 (On-Premise)Microsoft · Dynamics 365 Business Central 2019 Spring UpdateMicrosoft · Microsoft Dynamics 365 BC On PremiseMicrosoft · Microsoft Dynamics NAV 2013Microsoft · Microsoft Dynamics NAV 2015Microsoft · Microsoft Dynamics NAV 2016Microsoft · Microsoft Dynamics NAV 2017Microsoft · Microsoft Dynamics NAV 2018Related CVEs — Microsoft Dynamics 365 Business Central 2019…
In the same product, most dangerous first.
CVE-2020-0905—CVE-2020-0905EPSS 10.8%CVE-2020-1018—CVE-2020-1018EPSS 6.3%CVE-2022-41127HIGHMicrosoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution VulnerabilityEPSS 1.7%CVE-2021-1724MEDIUMMicrosoft Dynamics Business Central Cross-site Scripting VulnerabilityEPSS 1.3%