CVE-2021-40440

MEDIUM

Microsoft Dynamics Business Central - XSS

Title source: llm

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

CVSS v3 5.4

EPSS 0.0098

EPSS Percentile 58.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (2)

microsoft/dynamics_365_business_central 2020 update_17.10

microsoft/dynamics_365_business_central 2021 update_18.5

Published Sep 15, 2021

Tracked Since Feb 18, 2026