High · 8.8 CVE-2024-38225 EUVD-2024-37191GHSA-pg6q-2w5f-8pw9

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Published Sep 10, 2024 · Updated Aug 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft Dynamics 365 Business Central 2023 Release Wave 1 Product: Microsoft Dynamics 365 Business Central 2023 Release Wave 2 Product: Microsoft Dynamics 365 Business Central 2024 Release Wave 1

Description

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Microsoft Dynamics 365 Business Central 2023 Release Wave 1	22.0.0 – < 22.0.64727	22.0.64727
Microsoft	Microsoft Dynamics 365 Business Central 2023 Release Wave 2	23.0.0 – < 24.0.22865	24.0.22865
Microsoft	Microsoft Dynamics 365 Business Central 2024 Release Wave 1	24.0 – < 23.0.22561	23.0.22561

Advisories 3

MSRC-CVE-2024-38225 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability Microsoft Security Response Center · Aug 10, 2026
WID-SEC-2024-2122 Microsoft Dynamics 365: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 10, 2024
NCSC-2024-0367 Kwetsbaarheden verholpen in Microsoft Dynamics NCSC-NL (Netherlands) · Sep 10, 2024

References

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability vendor-advisory patch