Feb 2024: Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
CVE-2024-21380 Published on February 13, 2024

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:

NONE

Automatable:

Technical Impact:

TOTAL

Weakness Type

What is an Information Disclosure Vulnerability?

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CVE-2024-21380 has been classified to as an Information Disclosure vulnerability or weakness.

Products Associated with CVE-2024-21380

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft Dynamics 365 Business Central

Microsoft Dynamics 365 Business Central 2022

Microsoft Dynamics 365 Business Central 2023

Affected Versions

Microsoft Dynamics 365 Business Central 2022 Release Wave 2:

Version 21.0.0 and below 21.0.63175 is affected.

Microsoft Dynamics 365 Business Central 2023 Release Wave 1:

Version 22.0.0 and below 22.0.63124 is affected.

Microsoft Dynamics 365 Business Central 2023 Release Wave 2:

Version 23.0.0 and below 23.0.15712 is affected.

Exploit Probability

EPSS

1.74%

Percentile

77.80%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.