CVE-2025-29821
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
A vulnerability in Dynamics Business Central is due to improper input validation, allowing an authorized attacker to disclose information locally.
Risk Assessment
The risk is the potential disclosure of sensitive information by an authorized user, which could compromise data confidentiality.
Recommendation
It is recommended to apply security updates provided by the vendor for Dynamics Business Central.
Other vulnerabilities in Dynamics Business Central
See all- CVE-2026-105728High
Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.
- CVE-2026-105727High
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
- CVE-2026-102226High
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
- CVE-2026-100214High
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.
- CVE-2026-40375Medium
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.
Original NVD description (English source)
Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS