CVE-2020-0905

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftMicrosoft Dynamics NAV 2018unspecified
MicrosoftMicrosoft Dynamics NAV 2015unspecified
MicrosoftMicrosoft Dynamics 365 BC On Premiseunspecified
MicrosoftDynamics 365 Business Central 2019 Spring Updateunspecified
MicrosoftDynamics 365 Business Central 2019 Release Wave 2 (On-Premise)unspecified
MicrosoftMicrosoft Dynamics NAV 2016unspecified
MicrosoftMicrosoft Dynamics NAV 2017unspecified
MicrosoftMicrosoft Dynamics NAV 2013unspecified

References

Timeline

Published
Mar 12, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-09068.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'CVE-2020-09077.8A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft GraphicsCVE-2020-09087.5<p>A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory. An attacker who successfullyCVE-2020-09097.5A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets. To expCVE-2020-09108.4A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated usCVE-2020-09117.8<p>An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory. An attacker who succeCVE-2020-09127.0<p>An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory.</p> <p>To expCVE-2020-09137.8An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaCVE-2020-09145.5<p>An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attackeCVE-2020-09157.8An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'WCVE-2020-09167.8An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'WCVE-2020-09176.8An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Window
CVE-2020-0905: High severity, CVSS 8.0 | Vulnix