Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by a Cross-site Scripting Vulnerability.

Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.

The Microsoft Dynamics 365 (on-premises) installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: 

  - Remote Code Execution Vulnerability (CVE-2021-34524)

  - Cross-site Scripting Vulnerabilities (CVE-2021-36946, CVE-2021-36950)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version   number.

The Microsoft Dynamics 365 Business Central install is missing security updates. It is, therefore, affected by a Cross-site Scripting Vulnerability.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version   number.

ID	Name	Product	Family	Type	Severity
152526	Security Updates for Microsoft Dynamics NAV (August 2021)	Nessus	Windows : Microsoft Bulletins	Local	medium
152525	Security Updates for Microsoft Dynamics 365 (on-premises) (August 2021)	Nessus	Windows : Microsoft Bulletins	Local	high
152524	Security Updates for Microsoft Dynamics 365 Business Central (August 2021)	Nessus	Windows : Microsoft Bulletins	Local	medium

Detections

Analytics

CVE-2021-36946

medium

Tenable Plugins

medium

high

medium