CVE-2022-41127

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

State: Published
Severity: 8.5 High
Published: Dec 13, 2022
Updated: Jul 22, 2025
Reserved: Sep 19, 2022

Description

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

Scores

CVSS	Score	Vector	Source
3.1	8.5 High	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C	microsoft

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Microsoft Dynamics NAV 2016Microsoft	1.0 to before Build 52203Affected
Microsoft Dynamics NAV 2017Microsoft	1.0 to before Build 30712Affected
Microsoft Dynamics NAV 2018Microsoft	1.0 to before Build 49497Affected
Microsoft Dynamics NAV 2015Microsoft	1.0 to before 52204Affected
Dynamics 365 Business Central Spring 2019 UpdateMicrosoft	14.0.0 to before App Build 14.43.49498, Platform Build 14.0.49494Affected
Dynamics 365 Business Central 2019 Release Wave 2 (On-Premise)Microsoft	15.0.0 to before App Build 15.17.48428, Platform Build 15.0.48Affected
Microsoft Dynamics 365 Business Central 2020 Release Wave 2Microsoft	17.0.0 to before App Build 17.17.38111, Platform Build 17.0.38061Affected
Microsoft Dynamics 365 Business Central 2020 Release Wave 1Microsoft	16.0.0 to before App Build 16.19.35126, Platform Build 16.35120Affected
Microsoft Dynamics 365 Business Central 2022 Release Wave 1Microsoft	20.0.0 to before App Build 20.8.49971, Platform Build 20.0.49947Affected
Microsoft Dynamics 365 Business Central 2021 Release Wave 2Microsoft	19.0.0 to before App Build 19.14.49970, Platform Build 19.0.49925Affected
Microsoft Dynamics 365 Business Central 2022 Release Wave 2Microsoft	21.0.0 to before App Build 21.2.49990, Platform Build 21.0.49984Affected
Microsoft Dynamics 365 Business Central 2021 Release Wave 1Microsoft	18.0.0 to before App Build 18.18.46920, Platform Build 18.0.46905Affected
Microsoft Dynamics NAV 2013 R2Microsoft	1.0 to before 52297Affected

References

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.