CVE-2018-8651: Microsoft Dynamics Nav

Medium severity, CVSS 5.4. EPSS: 1.5% chance of exploitation in the next 30 days.

A cross site scripting vulnerability exists when Microsoft Dynamics NAV does not properly sanitize a specially crafted web request to an affected Dynamics NAV server, aka "Microsoft Dynamics NAV Cross Site Scripting Vulnerability." This affects Microsoft Dynamics NAV.

Affected products

• Microsoft Dynamics Nav: version 2016 only; version 2017 only

Published 2018-12-12. Last modified 2026-06-17.