CVE-2021-40440

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

CVE-2021-40440 is fixed in 2 products on 1 platform, first by KB5006075, released September 14, 2021. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.4
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0106
64th percentile

Where it's fixed

ProductFixed inFixReleased
Microsoft
Microsoft Dynamics 365 Business Central 2020 Release Wave 2 – Update 17.10 KB5006075 Sep 14, 2021
Microsoft Dynamics 365 Business Central 2021 Release Wave 1 - Update 18.5 KB5006076 Sep 14, 2021

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.