PT-2021-7043 · Microsoft · Dynamics Nav+1

Rskvp93 · Published 2021-09-14 · Updated 2023-12-28 · CVE-2021-40440

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics Business Central (affected versions not specified) Microsoft Dynamics NAV (affected versions not specified)

Description The issue is related to a cross-site scripting vulnerability in Microsoft Dynamics Business Central and Microsoft Dynamics NAV. This vulnerability is due to inadequate protection of the web page structure. An attacker could exploit this vulnerability to perform a cross-site scripting attack remotely.

Recommendations For Microsoft Dynamics Business Central, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Microsoft Dynamics NAV, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Spoofing

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2022-03043

CVE-2021-40440

Affected Products

Dynamics Business Central

Dynamics Nav

References · 6

• https://osv.dev/vulnerability/CVE-2021-40440 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40440 · Security Note
• https://bdu.fstec.ru/vul/2022-03043 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-40440 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40440 · Vendor Advisory
• https://t.me/cvenotify/21406 · Telegram Post