Mardi 13 octobre 2026

Finsys dockhand

Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate the mapped admin group and log in as Dockhand administrators.

Microsoft Dynamics NAV 2018

Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.

Microsoft Dynamics NAV 2018

Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

Microsoft Dynamics NAV 2018

Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

Microsoft Dynamics NAV 2017 · Microsoft Dynamics NAV 2018

Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.