Medium severity5.5NVD Advisory· Published Apr 8, 2025· Updated Aug 10, 2026
CVE-2025-29821
CVE-2025-29821
Description
Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally.
Affected products
823.0+ 3 more
- (no CPE)range: 23.0
- (no CPE)range: 24.0
- (no CPE)range: 25.0
- (no CPE)range: 26.0
- cpe:2.3:a:microsoft:dynamics_365_business_central_2023:*:*:*:*:on-premise:*:*:*Range: >=23.1.13812,<23.18.32409
- cpe:2.3:a:microsoft:dynamics_365_business_central_2024:*:*:*:*:on-premise:*:*:*Range: <24.12.32447
- cpe:2.3:a:microsoft:dynamics_365_business_central_2025:*:*:*:*:on-premise:*:*:*Range: <26.0.32481
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29821nvdVendor Advisory
News mentions
0No linked articles in our index yet.