THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2024-35249

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

Reserved:2024-05-14
Published:2024-06-11
Updated:2024-06-17

Description

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability



HIGH: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Problem types

CWE-502: Deserialization of Untrusted Data

Product status

24.0 before Application Build 24.1.19498, Platform Build 24.0.
affected

22.0.0 before Application Build 22.13.64344, Platform Build 22.0
affected

23.0.0 before Application Build 23.7.18957, Platform Build 23.0.
affected

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35249 (Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability) vendor-advisory

cve.org CVE-2024-35249

nvd.nist.gov CVE-2024-35249

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-35249