Lucene search

K
mskbMicrosoftKB5021671
HistoryDec 13, 2022 - 8:00 a.m.

Update 20.8 for Microsoft Dynamics 365 Business Central (on-premises) 2022 Release Wave 1 (Application Build 20.8.49971, Platform Build 20.0.49947)

2022-12-1308:00:00
Microsoft
support.microsoft.com
6
microsoft dynamics 365 business central
update 20.8
remote code execution
vulnerability
finance
cash management
inventory

8.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.0%

Update 20.8 for Microsoft Dynamics 365 Business Central (on-premises) 2022 Release Wave 1 (Application Build 20.8.49971, Platform Build 20.0.49947)

Overview

This update replaces previously released updates. You should always install the latest update. This update also fixes a remote code execution vulnerability. For more information, see CVE-2022-41127.After you install this hotfix, you might have to update your license to gain access to new objects that are included in this or a previous update. (This applies only to customer licenses.)For a list of updates that were released for Microsoft Dynamics 365 Business Central 2022 Release Wave 1, see released updates for Microsoft Dynamics 365 Business Central 2022 Release Wave 1. Updates are intended for new and existing customers who are running Microsoft Dynamics Released Updates for Microsoft Dynamics 365 Business Central 2022 Release Wave 1.ImportantWe recommend that you contact your Microsoft Dynamics Partner before you install hotfixes or updates. It is important to verify that your environment is compatible with the hotfixes or updates that will be installed. A hotfix or update may cause interoperability issues with customizations and third-party products that work together with your Microsoft Dynamics 365 Business Central solution.

Problems that are resolved in this update

The following problems are resolved in this update.Platform hotfixes****Application hotfixesID Title Functional Area
453029 β€œYour entry of X is not an acceptable value for β€˜Applies Amount’. The field can have a maximum of Y Decimal places” error message when trying the Apply Entries action in the Payment Reconciliation Journal. Cash Management
437713 The Starting Date and Ending Date fields are set mandatory on the request page while the account schedule can be printed without date filters. Finance
439183 Shortcut dimensions on the location card are not set by default on the transaction line as expected. Finance
448581 The Vendor Prepayment Journal report only shows the first line when using the same Document No. to post multiple payment lines for the same vendor. Finance
447218 Rounding differences between Purchase and Inventory accounts when distributing item charges in foreign currencies. Finance
452774 The VAT Difference is not posted during the Batch Posting. Finance
452949 The Remaining Amount on the Reminder Header incorrectly includes entries which are set to On Hold. Finance
454470 β€œPurch. Account must have a value in General Posting Setup: Gen. Bus. Posting Group” error message when trying to cancel a credit memo. Finance
456487 Unable to post the Year End Income Statement and balance sheet closure even if the General Posting setup option β€œDo not check dimensions” is enabled in the Czech version. Finance
448030 The Value Posting is not filled in the Item Card when creating an item from an Item Template with Dimensions defined. Inventory
449384 The Sales order and sales quote are missing on the Item List page. Inventory
450015 β€œThe length of the string is X, but it must be less than or equal to 20 characters.” error message when posting a warehouse shipment from an IC sales order. Inventory
453051 The Replenishment System field is updated and the Assembly BOM option is set to YES automatically when a user navigates into the assembly BOM page from purchase to assembly without creating any assembly BOM. Inventory
453078 A lot-tracked component item has been reversed from one production order and consumed in another. The consumption in the second production is not showing on the Item Tracing page. Inventory
455968 A description or comment entered in a Transfer Order is not taken over into the Posted Transfer Shipment. Inventory
446213 The Item Reservation prevents creating the Job Warehouse Pick. Jobs
449279 The currency identifier is missing in the Job Quote Preview report. Jobs
450262 Header Comments are not visible or saved in the Time Sheet Archive Card. Jobs
454633 The Open Current Time Sheet action in the role center doesn’t work. Jobs
446027 Prod. Order Comp. and Routing Report shows a blank request page. Manufacturing
448921 Tooltips are incorrect in the manufacturing module. Manufacturing
451879 Capacities are not updated after running the Calculate Work Center Calendar action multiple times when dealing with the shop calendar code and work center. Manufacturing
452965 β€œThe Planning Component does not exist…” error message when calculating a plan for the second time without planning lines, while Items included in the filter have manufacturing policy: Make-to-order. Manufacturing
453115 The Unit of Measure Code field is different at production order level with an SKU in use when dealing with items, UOM and SKU. Manufacturing
439173 The cost is missing when deleting an item charge assignment of a received item line if the item charge is invoiced. Purchase
444268 The Requisition Worksheet issues when using Stock Keeping Units. Purchase
449796 The order date doesn’t change in purchase order lines after changing the order date in the header. Purchase
451592 β€œThe job planning line does not exist. Identification fields and values: Job No= XXXX Job task No = XXXX, line no= X.” error message when trying to select an item lot to another job journal line. Purchase
454143 The Header Dimension is deleted in a purchase order when selecting the ship-to custom address and the choice of the confirm dialog is not respected. Purchase
456168 The confirmation message on controling the change of Header Dimensions shows twice when changing the Ship-to value in a purchase order. Purchase
436698 Contact Job Responsibilities does not work as a filter on the Suggested Email Addresses page. Sales
440130 Unable to edit the Purchasing code for an assembly BOM item on a sales order after deleting the related purchase order. Sales
448749 β€œThe Sales Header does not exist. Identification fields and values: Document Type=β€˜Order’,No.=β€˜X’” error message when creating a Sales Order for a customer with Recurring Lines setup to be inserted automatically. Sales
452974 VAT Clause is missing in the Posted Prepayment Invoice. Sales
453067 It is possible to delete a salesperson code even if it is in use. Sales
453071 β€œUnit Price Excl. VAT must be positive when Prepayment % is not 0 in Sales Line Document Type” error message appears when trying to access the Statistic. Sales
453112 The Shipping Time is not filled when creating a Sales Order by inserting a Sell-to Contact Number. Sales
453489 Requisition worksheet lines are deleted when using the order promising in a job planning line. Sales
456218 Issue when creating new pricelist lines for items with variants. Sales
455822 The confirmation message on applying customer or vendor templates is not clear enough about overwriting existing values on the customer or vendor with blank values from the templates. Sales
455890 ItemFilter is missing for the Service Line in Codeunit 5022. Service Management
437213 Warehouse Pick process does not pick full quantity even if the stock is enough for the pick. Warehouse
448297 The print overview is incorrect at the posted transfer shipment level and some data are overridden on the Header Level report when dealing with a direct transfer. Warehouse
449305 Unable to delete a registered Warehouse Putaway due to permission issues. Warehouse
451633 The Availability by Lot page in the Warehouse Pick shows wrong Item numbers. Warehouse
Local application hotfixes****AU - AustraliaID Title Functional Area
β€” β€” β€”
450845 The Source Code is not populating on Bank Deposit Journal Lines in the Australian version. Finance
449150 β€œThe length of the string is 20, but it must be less than or equal to 10 characters. Value: XXXXXXXXXXX” error message exists regarding dimension value characters limit in the Australian version. Finance
447990 The rounding down function is not working after clicking β€œStatistics” or β€œRelease” in a purchase order and the amount rounds up in the Australian version. Finance
BE - BelgiumID Title Functional Area
β€” β€” β€”
449049 Allow Posting Date From/To fields have the same caption as the W1 version in the Belgian version. Finance
CA - CanadaID Title Functional Area
β€” β€” β€”
450108 Tax percentages for the Manitoba Tax Details need to be updated to seven percent in the Canadian version. Finance
451480 Error in the Sales Tax Journal if the Bank Account Code is more than 10 characters in the Canadian version. Finance
CZ - CzechiaID Title Functional Area
β€” β€” β€”
455517 The incorrect Exchange Rate is used for Documents with currencies when an Adjust for Payment Discount is applied in the Czech version. Cash Management
454021 Error message occurs during the process of transferring lines from Bank Statement to Payment Journal and not all the lines are transferred in the Czech version. Cash Management
453533 Issue with the Physical Inventory List report in the Czech version. Finance
454468 The Your Reference field shows on the purchase documents page in the Czech version. Purchase
ES - SpainID Title Functional Area
β€” β€” β€”
453649 β€œParse Error: Couldn’t match the documents” error message appears on SII History when trying to use the Retry All option in the Spanish version. Finance
US - United StatesID Title Functional Area
β€” β€” β€”
451480 Error in the Sales Tax Journal if the Bank Account Code is more than 10 characters in the United States version. Finance
Regulatory featuresID Title Functional Area
β€” β€” β€”
435889 The β€œPerson” field is added to Customer and Vendor tables replacing the β€œPartner Type” field used for SEPA. Financial Management
436863 Update the Intrastat Checklist report. Financial Management
436886 Update the Intrastat Form report. Financial Management
Local regulatory features****MX - MexicoID Title Functional Area
β€” β€” β€”
455350 Need an option in the Sales invoice to add the Comercio Exterio Complemento in the Mexican version. Financial Management
NL - NetherlandsID Title Functional Area
β€” β€” β€”
454923 Update the setup for yearly taxonomy of Electronic Tax Declaration in the Dutch version. Financial Management

Resolution

How to obtain the Microsoft Dynamics 365 Business Central 2022 Release Wave 1 files

This update is available for manual download and installation from the Microsoft Download Center.Update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1

Which hotfix package to download

This update has multiple hotfix packages. Select and download one of the following packages depending on the country version of your Microsoft Dynamics 365 Business Central 2022 database.Country Hotfix package
AT - Austria Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 AT package
AU - Australia Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 AU package
BE - Belgium Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 BE package
CA - Canada Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 CA package
CH - Switzerland Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 CH package
CZ- Czechia Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 CZ package
DE - Germany Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 DE package
DK - Denmark Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 DK package
ES - Spain Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 ES package
FI - Finland Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 FI package
FR - France Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 FR package
GB - United Kingdom Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 UK package
IN - India Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 IN package
IS - Iceland Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 IS package
IT - Italy Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 IT package
MX - Mexico Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 MX package
NL - Netherlands Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 NL package
NO - Norway Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 NO package
NZ - New Zealand Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 NZ package
RU - Russia Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 RU package
SE - Sweden Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 SE package
US - United States Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 US package
All other countries Download update 20.8 for Microsoft Dynamics 365 Business Central 2022 Release Wave 1 W1 package

How to install a Microsoft Dynamics 365 Business Central on-premises 2022 Release Wave 1 update

See How to install a Microsoft Dynamics 365 Business Central 2022 Release Wave 1 update.

Prerequisites

You must have Microsoft Dynamics 365 Business Central 2022 Release Wave 1 installed to apply this hotfix.

More information

See more information about software update terminology and Microsoft Dynamics 365 Business Central 2022 Release Wave 1.

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the β€œApplies to” section.

8.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.0%