CVE-2023-38167

HighCVSS 7.2/10Last modified Nov 10, 2026

Description

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
MicrosoftMicrosoft Dynamics 365 Business Central 2023 Release Wave 1>= 22.0.0, < 22.0.59520

References

Timeline

Published
Aug 8, 2023
Last modified
Nov 10, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-381698.8Microsoft SQL OLE DB Remote Code Execution VulnerabilityCVE-2023-38175.3Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_cheCVE-2023-381707.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2023-381717.5Microsoft QUIC Denial of Service VulnerabilityCVE-2023-381727.5Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2023-381734.3Microsoft Edge for Android Spoofing VulnerabilityCVE-2023-381744.3Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2023-381757.8Microsoft Windows Defender Elevation of Privilege VulnerabilityCVE-2023-381767.0Azure Arc-Enabled Servers Elevation of Privilege VulnerabilityCVE-2023-381776.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2023-381787.5.NET Core and Visual Studio Denial of Service VulnerabilityCVE-2023-381807.5.NET and Visual Studio Denial of Service Vulnerability
CVE-2023-38167: High severity, CVSS 7.2 | Vulnix