CVE-2020-1022
A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka ...
A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
- Record
CVE-2020-1022- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.0 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
- Record
CVE-2020-1022- Updated
- 2026-11-02
EUVDEUVD-2020-11918 No score
A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
- Record
EUVD-2020-11918- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rq3c-gxfr-p3c8 No score
A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka ...
A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
- Record
GHSA-rq3c-gxfr-p3c8- Weakness
- CWE-74
- Updated
- 2026-11-02
Affected products
- microsoft dynamics 365 business central 2019 release wave 2 (on-premise)
- microsoft dynamics 365 business central 2019 spring update
- microsoft dynamics 365 business central
- microsoft dynamics nav
- microsoft dynamics 365 bc on premise
- microsoft dynamics nav 2013
- microsoft dynamics nav 2015
- microsoft dynamics nav 2016
- microsoft dynamics nav 2017
- microsoft dynamics nav 2018
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-1022 is a high vulnerability (CVSS 8.0) in Microsoft Dynamics 365 Business Central 2019 Release Wave 2 (on-premise), published April 15, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.83%, the 94th percentile. No source names a fixed version.