CVE-2021-36946: Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 14.0.47540Patch KB5005370 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 17.0.28458Patch KB5005374 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.28457Patch KB5005373 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 30601Patch KB5005368 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 47562Patch KB5005369
Event History
Frequently Asked Questions
What is the severity of CVE-2021-36946?
CVE-2021-36946 has a severity rating that indicates a moderate risk associated with cross-site scripting vulnerabilities in Microsoft Dynamics Business Central.
How do I fix CVE-2021-36946?
To fix CVE-2021-36946, ensure you apply the latest security updates provided by Microsoft for the affected versions of Dynamics Business Central and Dynamics NAV.
What versions are affected by CVE-2021-36946?
CVE-2021-36946 affects Microsoft Dynamics 365 Business Central versions 2019 Spring Update, 2020 Release Wave 1, 2020 Release Wave 2, and Dynamics NAV versions 2017 and 2018.
What type of vulnerability is CVE-2021-36946?
CVE-2021-36946 is classified as a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts into web pages.
Who is impacted by CVE-2021-36946?
Organizations using the affected versions of Microsoft Dynamics Business Central and Dynamics NAV are impacted by CVE-2021-36946.