CVE-2024-35249High· 8.8▾ TwilightMicrosoft Dynamics 365 Business Central Remote Code Execution Vulnerability
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.7 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
3.4%
3.4% → 3.4%
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
dynamics_365_business_central = 2023dynamics_365_business_central = 2024Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2020-0618High· 8.8A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.
CVE-2021-26857High· 7.8Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-34520High· 8.1Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-34474High· 8.0Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
CVE-2024-35248High· 7.3Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVE-2020-5411High· 8.1When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution