microsoft dynamics 365 business central

Name: microsoft dynamics 365 business central
Brand: microsoft

productUS

cpe:2.3:a:microsoft:dynamics_365_business_central:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

1critical4high1medium3low

updated 2026-10-28

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-0905US	high8.0	10.8% (96th)	—	no fix	2020-03-12	2 versions
CVE-2020-1022US	high8.0	6.83% (94th)	—	no fix	2020-04-15	2 versions
CVE-2020-1018US	high7.5	6.31% (94th)	—	no fix	2020-04-15	2 versions
CVE-2024-35249US	—	3.43% (89th)	—	no fix	2024-06-11	2 versions
CVE-2021-34474US	medium6.5	2.17% (82nd)	—	no fix	2021-07-14	2 versions
CVE-2024-21380US	—	1.74% (78th)	—	no fix	2024-02-13	2 versions
CVE-2022-41127US	—	1.71% (77th)	—	no fix	2022-12-13	4 versions
CVE-2023-38167US	—	1.40% (72nd)	—	no fix	2023-08-08	= 2023
CVE-2024-38225US	critical9.8	1.37% (72nd)	—	no fix	2024-09-10	2 versions
CVE-2021-1724US	low2.3	1.31% (70th)	—	no fix	2021-02-25	2 versions
CVE-2021-40440US	low3.5	1.06% (64th)	—	no fix	2021-09-15	2 versions
CVE-2021-36946US	low3.5	1.03% (63rd)	—	no fix	2021-08-12	2 versions
CVE-2024-35248US	—	0.95% (61st)	—	no fix	2024-06-11	2 versions
CVE-2024-43460US	high8.8	0.71% (53rd)	—	no fix	2024-09-17	—
CVE-2026-40417US	—	0.27% (20th)	—	no fix	2026-05-12	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-1390Weak Authentication2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-264CWE-2641 CVEs
CWE-284Improper Access Control1 CVEs
CWE-285Improper Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.