CVE-2022-41066

MediumCVSS 4.4/10Last modified Aug 10, 2026

Description

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected software

VendorProductVersions
MicrosoftDynamics 365 Business Central Spring 2019 Update>= 14.0.0, < 14.0.49339
MicrosoftMicrosoft Dynamics 365 Business Central 2021 Release Wave 2>= 19.0.0, < 19.0.48446
MicrosoftMicrosoft Dynamics 365 Business Central 2022 Release Wave 1>= 20.0.0, < 20.0.48457
MicrosoftMicrosoft Dynamics 365 Business Central 2022 Release Wave 2>= 21.0.0, < 21.0.48504
MicrosoftMicrosoft Dynamics NAV 2018>= 1.0, < 49345

References

Timeline

Published
Nov 9, 2022
Last modified
Aug 10, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-41076.5The SMSA Shipping for WooCommerce WordPress plugin before 1.0.5 does not have authorisation and proper CSRF checks, as well as does not valiCVE-2022-410737.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-410745.5Windows Graphics Component Information Disclosure VulnerabilityCVE-2022-410768.5PowerShell Remote Code Execution VulnerabilityCVE-2022-410777.8Windows Fax Compose Form Elevation of Privilege VulnerabilityCVE-2022-410788.0Microsoft Exchange Server Spoofing VulnerabilityCVE-2022-410798.0Microsoft Exchange Server Spoofing VulnerabilityCVE-2022-41084.9The Wholesale Market for WooCommerce WordPress plugin before 1.0.8 does not validate user input used to generate system path, allowing high CVE-2022-410808.8Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-410818.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-410828.0Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2022-410837.8Visual Studio Code Elevation of Privilege Vulnerability
CVE-2022-41066: Medium severity, CVSS 4.4 | Vulnix