Customers who use on premise versions of Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central need to be aware of a number of issues affecting these versions of NAV and BC.
NAV On premise Security Vulnerability (CVE-2022-41127)
In December 2022 Microsoft announced they had uncovered a vulnerability with some on premise versions of NAV.
The vulnerability can allow malicious code to be executed on the server. However it can only be exploited over an authenticated NAV client session. Microsoft have just recently released a Cumulative Update to fix this. They have also stated it’s a very low risk vulnerability due to the fact the exploitation has to be from a user-authenticated NAV client session and from the NAV client itself.
Versions affected are:
- NAV 2018 (11.x)
- NAV 2017 (10.0)
- Dynamics NAV 2016 (9.0)
- Dynamics NAV 2015 (8.0)
- Dynamics NAV 2013 R2 (7.1)
SQL Server – End of Life information
Each version of SQL Server is backed by a minimum of 10 years support. This includes five years in mainstream support, and five years in extended support. Here is some important information regarding SQL on premise versions and end of life support dates. If your SQL Server is end of life, please be aware that Microsoft will no longer provide any updates.
Please note, if the SQL Server Service Pack is up to date, the mainstream and extended support dates are as follows.
Out of support (mainstream AND extended)
- SQL Server 2005 Start Date: 14 Jan 2006 – End Date: 12 Apr 2016
- SQL Server 2008 Start Date: 6 Nov 2008 – End Date: 9 Jul 2019
- SQL Server 2012 Start Date: 20 May 2012 – End Date: 12 Jul 2022
Out of mainstream support, but still in extended support
- SQL Server 2014 Start Date: 5 Jun 2014 – End Date: 9 Jul 2024
- SQL Server 2016 Start Date: 1 Jun 2016 – End Date: 14 Jul 2026
- SQL Server 2017 Start Date: 29 Sep 2017 – End Date: 12 Oct 2027
Still covered by both mainstream and extended support
- SQL Server 2019 Start Date: 4 Nov 2019 – End Date: 8 Jan 2030
- SQL Server 2022 Start Date: 16 Nov 2022 – End Date: 11 Jan 2033
Windows Server 2012R2 – End of Life
Windows 2012R2 is going out of support on 10 October 2023 (Windows Server 2012 and 2012 R2 reaching end of support – Microsoft Lifecycle | Microsoft Learn).
Customers with NAV 2013R2 and NAV 2015 will have issues if they upgrade to a later Windows Servers (we anticipate 2019 onwards) with a message during login:
“The Server “DynamicsNav80″ was unable to process the request. The application will close”.
In order to run these versions of NAV on newer Windows Servers, you must update NAV to a minimum Cumulative Update as follows:
- NAV 2015 Build 42951 (CU 12)
- NAV 2013R2 version: 7.01.42950 — V7R2CU24 — GBKB3097766 — 487550_ENU_i386
For further information
To help NAV and BC customers affected by one or more of these issues, TVision Technology has arranged the following:
- An online group event on Wednesday, 8 March with our technical expert to discuss options/next steps. Click here to book your place.
- Following this, if required, you can schedule a 30-minute call with our technical expert to discuss your individual requirements and establish what immediate actions are required. Unless the patch can be applied and work completed in a further 30 minutes, any required work will be carried out as a standard chargeable Change Request.
