{"id":"CVE-2022-41066","state":"PUBLISHED","title":"Microsoft Dynamics Business Central Information Disclosure Vulnerability","description":"Microsoft Dynamics Business Central Information Disclosure Vulnerability","publishedAt":"2022-11-09T00:00:00.000Z","updatedAt":"2026-08-10T15:11:53.484Z","severity":{"score":4.4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Dynamics 365 Business Central Spring 2019 Update","Microsoft Microsoft Dynamics 365 Business Central 2021 Release Wave 2","Microsoft Microsoft Dynamics 365 Business Central 2022 Release Wave 1","Microsoft Microsoft Dynamics 365 Business Central 2022 Release Wave 2","Microsoft Microsoft Dynamics NAV 2018"],"affected":[{"vendor":"Microsoft","product":"Dynamics 365 Business Central Spring 2019 Update","versions":[{"version":"14.0.0","status":"affected","lessThan":"14.0.49339","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Dynamics 365 Business Central 2021 Release Wave 2","versions":[{"version":"19.0.0","status":"affected","lessThan":"19.0.48446","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Dynamics 365 Business Central 2022 Release Wave 1","versions":[{"version":"20.0.0","status":"affected","lessThan":"20.0.48457","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Dynamics 365 Business Central 2022 Release Wave 2","versions":[{"version":"21.0.0","status":"affected","lessThan":"21.0.48504","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Dynamics NAV 2018","versions":[{"version":"1.0","status":"affected","lessThan":"49345","versionType":"custom"}]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41066"],"weaknesses":[],"ingestedAt":"2026-10-29T19:50:37.819Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/41xxx/CVE-2022-41066.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-41066","state":"PUBLISHED","datePublished":"2022-11-09T00:00:00.000Z","dateUpdated":"2026-08-10T15:11:53.484Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2022-09-19T00:00:00.000Z"},"containers":{"cna":{"title":"Microsoft Dynamics Business Central Information Disclosure Vulnerability","descriptions":[{"lang":"en-US","value":"Microsoft Dynamics Business Central Information Disclosure Vulnerability"}],"affected":[{"vendor":"Microsoft","product":"Dynamics 365 Business Central Spring 2019 Update","versions":[{"version":"14.0.0","status":"affected","lessThan":"14.0.49339","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Dynamics 365 Business Central 2021 Release Wave 2","versions":[{"version":"19.0.0","status":"affected","lessThan":"19.0.48446","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Dynamics 365 Business Central 2022 Release Wave 1","versions":[{"version":"20.0.0","status":"affected","lessThan":"20.0.48457","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Dynamics 365 Business Central 2022 Release Wave 2","versions":[{"version":"21.0.0","status":"affected","lessThan":"21.0.48504","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Dynamics NAV 2018","versions":[{"version":"1.0","status":"affected","lessThan":"49345","versionType":"custom"}]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41066","name":"Microsoft Dynamics Business Central Information Disclosure Vulnerability","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"MEDIUM","baseScore":4.4,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"description":"Information Disclosure","lang":"en-US","type":"Impact"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2026-08-10T15:11:53.484Z"},"datePublic":"2022-11-08T16:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:dynamics_nav_2018:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"49345"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:dynamics_365_business_central_2019:*:spring_update:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndExcluding":"14.0.49339"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:dynamics_365_business_central_2022:*:release_wave_2:*:*:*:*:*:*","versionStartIncluding":"21.0.0","versionEndExcluding":"21.0.48504"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:dynamics_365_business_central_2022:*:release_wave_1:*:*:*:*:*:*","versionStartIncluding":"20.0.0","versionEndExcluding":"20.0.48457"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:dynamics_365_business_central_2021:*:release_wave_2:*:*:*:*:*:*","versionStartIncluding":"19.0.0","versionEndExcluding":"19.0.48446"}]}]}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41066","name":"Microsoft Business Central Information Disclosure Vulnerability","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T12:35:49.089Z"}}]}}}