CVE-2021-36946

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

State: Published
Severity: 5.4 Medium
Published: Aug 12, 2021
Updated: Aug 10, 2026
Reserved: Jul 19, 2021

Description

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

Scores

CVSS	Score	Vector	Source
3.1	5.4 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C	microsoft

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Dynamics 365 Business Central Spring 2019 UpdateMicrosoft	14.0.0 to before 14.0.47540Affected
Microsoft Dynamics 365 Business Central 2020 Release Wave 1 - Update 16.15Microsoft	16.0 to before 16.0.28457Affected
Microsoft Dynamics 365 Business Central 2020 Release Wave 2 - Update 17.9Microsoft	17.0 to before 17.0.28458Affected
Microsoft Dynamics NAV 2017Microsoft	1.0 to before 30601Affected
Microsoft Dynamics NAV 2018Microsoft	1.0 to before 47562Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.