High · 8.5 CVE-2022-41127 EUVD-2022-44370GHSA-wj3j-9c8f-9hvm

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

Published Dec 13, 2022 · Updated Jul 22, 2025 · Assigned by microsoft

Vendor: Microsoft Product: Dynamics 365 Business Central 2019 Release Wave 2 (On-Premise) Product: Dynamics 365 Business Central Spring 2019 Update Product: Microsoft Dynamics 365 Business Central 2020 Release Wave 1 Product: Microsoft Dynamics 365 Business Central 2020 Release Wave 2 Product: Microsoft Dynamics 365 Business Central 2021 Release Wave 1 Product: Microsoft Dynamics 365 Business Central 2021 Release Wave 2 Product: Microsoft Dynamics 365 Business Central 2022 Release Wave 1 Product: Microsoft Dynamics 365 Business Central 2022 Release Wave 2 Product: Microsoft Dynamics NAV 2013 R2 Product: Microsoft Dynamics NAV 2015 Product: Microsoft Dynamics NAV 2016 Product: Microsoft Dynamics NAV 2017 Product: Microsoft Dynamics NAV 2018

Description

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft Dynamics NAV 2016	1.0 – < Build 52203	Build 52203
Microsoft	Microsoft Dynamics NAV 2017	1.0 – < Build 30712	Build 30712
Microsoft	Microsoft Dynamics NAV 2018	1.0 – < Build 49497	Build 49497
Microsoft	Microsoft Dynamics NAV 2015	1.0 – < 52204	52204
Microsoft	Dynamics 365 Business Central Spring 2019 Update	14.0.0 – < App Build 14.43.49498, Platform Build 14.0.49494	App Build 14.43.49498, Platform Build 14.0.49494
Microsoft	Dynamics 365 Business Central 2019 Release Wave 2 (On-Premise)	15.0.0 – < App Build 15.17.48428, Platform Build 15.0.48	App Build 15.17.48428, Platform Build 15.0.48
Microsoft	Microsoft Dynamics 365 Business Central 2020 Release Wave 2	17.0.0 – < App Build 17.17.38111, Platform Build 17.0.38061	App Build 17.17.38111, Platform Build 17.0.38061
Microsoft	Microsoft Dynamics 365 Business Central 2020 Release Wave 1	16.0.0 – < App Build 16.19.35126, Platform Build 16.35120	App Build 16.19.35126, Platform Build 16.35120
Microsoft	Microsoft Dynamics 365 Business Central 2022 Release Wave 1	20.0.0 – < App Build 20.8.49971, Platform Build 20.0.49947	App Build 20.8.49971, Platform Build 20.0.49947
Microsoft	Microsoft Dynamics 365 Business Central 2021 Release Wave 2	19.0.0 – < App Build 19.14.49970, Platform Build 19.0.49925	App Build 19.14.49970, Platform Build 19.0.49925
Microsoft	Microsoft Dynamics 365 Business Central 2022 Release Wave 2	21.0.0 – < App Build 21.2.49990, Platform Build 21.0.49984	App Build 21.2.49990, Platform Build 21.0.49984
Microsoft	Microsoft Dynamics 365 Business Central 2021 Release Wave 1	18.0.0 – < App Build 18.18.46920, Platform Build 18.0.46905	App Build 18.18.46920, Platform Build 18.0.46905
Microsoft	Microsoft Dynamics NAV 2013 R2	1.0 – < 52297	52297

Advisories 2

MSRC-CVE-2022-41127 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability Microsoft Security Response Center · Oct 10, 2023
WID-SEC-2022-2306 Microsoft Dynamics: Schwachstelle ermöglichen Codeausführung BSI CERT-Bund (WID) · Dec 13, 2022

References

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability vendor-advisory