CVE-2021-40440: Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Published Sep 15, 2021
·Updated
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
Affected Software
2 affected components
Microsoft Dynamics 365 Business Central=2020-update_17.10
Microsoft Dynamics 365 Business Central=2021-update_18.5
Remediation
Event History
Sep 15, 2021
CVE Published
via MITRE·11:24 AM
Data Sourced
via MITRE·11:24 AM
DescriptionSeverity
Data Sourced
via NVD·12:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-40440?
CVE-2021-40440 is rated with a moderate severity level.
2
How do I fix CVE-2021-40440?
To fix CVE-2021-40440, apply the latest updates available for Microsoft Dynamics 365 Business Central.
3
What types of attacks can CVE-2021-40440 be used for?
CVE-2021-40440 can be exploited for Cross-site Scripting (XSS) attacks.
4
Which versions of Microsoft Dynamics are affected by CVE-2021-40440?
CVE-2021-40440 affects Microsoft Dynamics 365 Business Central versions 2020-update_17.10 and 2021-update_18.5.
5
Is user interaction required to exploit CVE-2021-40440?
Yes, user interaction is required for an attacker to exploit CVE-2021-40440.