CVE-2021-1724: Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

Published Feb 25, 2021

Updated

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

Affected Software

7 affected components

Microsoft Dynamics 365 Business Central=2019-release_wave_2

Microsoft Dynamics 365 Business Central=2020-release_wave_1

Microsoft Dynamics 365 Business Central=2020-release_wave_2

Microsoft Dynamics NAV=2015

Microsoft Dynamics NAV=2016

Microsoft Dynamics NAV=2017

Microsoft Dynamics NAV=2018

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1724

Event History

Feb 25, 2021

CVE Published

11:01 PM

Data Sourced

11:01 PM

DescriptionSeverity

Data Sourced

via NVD·11:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2021-1724?

CVE-2021-1724 has a severity rating of medium, indicating a moderate risk to affected systems.

How do I fix CVE-2021-1724?

To fix CVE-2021-1724, apply the latest security updates provided by Microsoft for the affected versions of Dynamics 365 Business Central and Dynamics NAV.

Which Microsoft software is affected by CVE-2021-1724?

CVE-2021-1724 affects Microsoft Dynamics 365 Business Central and Microsoft Dynamics NAV in specific release versions.

What type of vulnerability is CVE-2021-1724?

CVE-2021-1724 is a cross-site scripting (XSS) vulnerability allowing attackers to execute scripts in the context of a user's session.

What are the affected versions related to CVE-2021-1724?

The affected versions for CVE-2021-1724 include Microsoft Dynamics 365 Business Central versions 2019 Release Wave 2, 2020 Release Wave 1, 2020 Release Wave 2, and several versions of Dynamics NAV from 2015 to 2018.