CVE-2018-8651: XSS

Published Dec 12, 2018

Updated

A cross site scripting vulnerability exists when Microsoft Dynamics NAV does not properly sanitize a specially crafted web request to an affected Dynamics NAV server, aka "Microsoft Dynamics NAV Cross Site Scripting Vulnerability." This affects Microsoft Dynamics NAV.

Affected Software

2 affected components

Microsoft Dynamics NAV=2016

Microsoft Dynamics NAV=2017

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8651

Event History

Dec 12, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8651?

CVE-2018-8651 is rated as moderate in severity due to its potential impact through cross-site scripting.

How do I fix CVE-2018-8651?

To fix CVE-2018-8651, you should apply the latest updates provided by Microsoft for affected versions of Dynamics NAV.

What versions of Microsoft Dynamics NAV are affected by CVE-2018-8651?

CVE-2018-8651 affects Microsoft Dynamics NAV versions 2016 and 2017.

What type of vulnerability is CVE-2018-8651?

CVE-2018-8651 is a cross-site scripting vulnerability that arises from improper input sanitization.

Can CVE-2018-8651 be exploited remotely?

Yes, CVE-2018-8651 can be exploited remotely if a user is tricked into clicking a malicious link.