KLA12070
Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Dataverse can be exploited remotely to obtain sensitive information.
2. A cross-site-scripting (XSS) vulnerability Microsoft Dynamics Business Central can be exploited remotely to spoof user interface.

Microsoft Dynamics NAV 2017
Microsoft Dynamics NAV 2018
Microsoft Dynamics 365 (on-premises) version 8.2
Microsoft Dynamics NAV 2016
Microsoft Dynamics 365 (on-premises) version 9.0
Dynamics 365 Business Central 2019 Release Wave 2 (On-Premise)
Microsoft Dynamics 365 Business Central 2020 Release Wave 1
Microsoft Dynamics NAV 2015
Microsoft Dynamics 365 Business Central 2020 Release Wave 2

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

CVE-2021-24101
CVE-2021-1724

4602915
4595463
4595460