PT-2025-15593 · Microsoft · Dynamics Business Central

Published 2025-04-08 · Updated 2025-08-12 · CVE-2025-29821

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Dynamics Business Central (affected versions not specified)

Description: The issue is related to improper input validation, which allows an authorized attacker to disclose information locally. This means that an attacker with authorization can potentially access sensitive information due to the lack of proper validation of input data.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-04256

CVE-2025-29821

Affected Products

Dynamics Business Central

References · 8

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-29821 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29821 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-29821 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04256 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-29821 · Security Note
• https://t.me/cvetracker/21161 · Telegram Post
• https://twitter.com/CVEnew/status/1909906969483211113 · Twitter Post
• https://t.me/cveNotify/131840 · Telegram Post