CVE-2021-40440

MediumCVSS 5.4/10Last modified Aug 10, 2026

Description

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
MicrosoftMicrosoft Dynamics 365 Business Central 2020 Release Wave 2 – Update 17.10>= 17.0.0.0, < 17.0.29460
MicrosoftMicrosoft Dynamics 365 Business Central 2021 Release Wave 1 - Update 18.5>= 18.0.0.0, < 18.0.29486

References

Timeline

Published
Sep 15, 2021
Last modified
Aug 10, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-404417.8Windows Media Center Elevation of Privilege VulnerabilityCVE-2021-404427.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-404437.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2021-404448.8Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of CVE-2021-404477.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-404486.3Microsoft Accessibility Insights for Android Information Disclosure VulnerabilityCVE-2021-404497.8Win32k Elevation of Privilege VulnerabilityCVE-2021-40459.8TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uCVE-2021-404507.8Win32k Elevation of Privilege VulnerabilityCVE-2021-404527.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-404537.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-404545.5Rich Text Edit Control Information Disclosure Vulnerability
CVE-2021-40440: Medium severity, CVSS 5.4 | Vulnix