CVE-2021-36946: Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

Published Aug 12, 2021

Updated

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

Affected Software

5 affected components

Microsoft Dynamics 365 Business Central=2019-spring_update

Microsoft Dynamics 365 Business Central=2020-release_wave_1

Microsoft Dynamics 365 Business Central=2020-release_wave_2

Microsoft Dynamics NAV=2017

Microsoft Dynamics NAV=2018

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36946

Event History

Aug 12, 2021

CVE Published

06:12 PM

Data Sourced

06:12 PM

DescriptionSeverity

Data Sourced

via NVD·06:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2021-36946?

CVE-2021-36946 has a severity rating that indicates a moderate risk associated with cross-site scripting vulnerabilities in Microsoft Dynamics Business Central.

How do I fix CVE-2021-36946?

To fix CVE-2021-36946, ensure you apply the latest security updates provided by Microsoft for the affected versions of Dynamics Business Central and Dynamics NAV.

What versions are affected by CVE-2021-36946?

CVE-2021-36946 affects Microsoft Dynamics 365 Business Central versions 2019 Spring Update, 2020 Release Wave 1, 2020 Release Wave 2, and Dynamics NAV versions 2017 and 2018.

What type of vulnerability is CVE-2021-36946?

CVE-2021-36946 is classified as a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts into web pages.

Who is impacted by CVE-2021-36946?

Organizations using the affected versions of Microsoft Dynamics Business Central and Dynamics NAV are impacted by CVE-2021-36946.