This article applies to Microsoft Dynamics 365 Business Central Spring 2019 Update (on-premises deployments) for all countries and all language locales.
A remote code execution vulnerability exists in Microsoft Dynamics NAV. A user who has the permission to access certain features that requires a call from the Role-Tailored Client that has the dataset structure can start arbitrary shell commands through deserialization.
To learn more about the vulnerability, go to CVE-2020-0905.
Overview
This cumulative update replaces previously released cumulative updates. You should always install the latest cumulative update.
It may be necessary to update your license after you install this hotfix to gain access to new objects that are included in this or a previous cumulative update. (This applies only to customer licenses.)
For a list of cumulative updates that were released for Microsoft Dynamics 365 Business Central Spring 2019, see released cumulative updates for Microsoft Dynamics 365 Business Central Spring 2019. Cumulative updates are intended for new and existing customers who are running Microsoft Dynamics Released Cumulative Updates for Microsoft Dynamics 365 Business Central Spring 2019.
Note
When you upgrade to Business Central 2019 release wave 2 (version 15), refer to Dynamics 365 Business Central Upgrade Compatibility Matrix to see which Business Central 15 versions are compatible with this cumulative update.
Important
We recommend that you contact your Microsoft Dynamics Partner before you install hotfixes or updates. It is important to verify that your environment is compatible with the hotfixes or updates that will be installed. A hotfix or update may cause interoperability issues with customizations and third-party products that work together with your Microsoft Dynamics 365 Business Central solution.
Problems that are resolved in this cumulative update
The following problems are resolved in this cumulative update:
Platform hotfixes
| ID | Title |
|---|---|
| 345948 | The Export-NavApplicationObject function is broken in CU 9, as well as the Compile, Import, and Delete functions. |
| 345332 | Do not make public SQL Injection command and report on Business Central Help Server. |
| 340816 | Dynamically hiding visibility of a group on a page is breaking the F6 shortcut, where the focus does not go past the hidden group in the Web client. |
| 342206 | The Enable Incremental Company Deletion setting is enabled by default on Business Central on-premises server settings. |
| 336724 | "Sales line already exists..." error message is displayed when you sort on a column other than the Line No. field and continue to enter the new sales lines. |
| 343637 | The List pages cannot be opened if you change the SQL Data Type property of the No. field in the Item table to Variant. |
Application hotfixes
| ID | Title | Functional Area | Changed Objects |
|---|---|---|---|
| 340904 | The Rapid Start Validate Package process is extremely slow when you import a small amount of data into the table from a spreadsheet. | Administration | COD 8611 COD 8617 |
| 340645 | The payment registration functionality does not work for credit memos, but credit memos are displayed on the Payment Registration page. | Cash Management | COD 980 |
| 342060 | The inventory posting group and inventory posting setup is duplicated on the MenuSuite. | Finance | MEN 1010 MEN 1030 |
| 342391 | An electronic invoice in EHF 3.0 format cannot be validated successfully when the document contains positive and negative lines and different VAT rates. | Finance | COD 1620 |
| 339141 | The location code is not selected for the Quick Entry property when you press the ENTER button in the sales documents. | Finance | PAG 46 PAG 47 PAG 54 PAG 55 PAG 6631 PAG 6641 PAG 95 PAG 96 PAG 97 PAG 98 |
| 341358 | The Customer - Balance to Date report doesn't display anything although there is a balance for a customer. | Finance | REP 121 REP 321 |
| 344055 | Inconsistent posting dates display in the vendor ledger entries and a vendor payment transaction, and cause differences between G/L and subledger. | Finance | PAG 1190 |
| 340871 | "The changes to the Item Category record cannot be saved" error message is displayed when the Parent Category field is validated on the Item Category page. | Inventory | PAG 5733 TAB 5722 |
| 342239 | The unit cost with the open outbound entries on the Item card are extremely high. | Inventory | COD 5804 TAB 339 |
| 344041 | A reduction performance displays in the exponential adjust cost after you post double entries. | Inventory | COD 5895 |
| 340158 | "Not all routing lines are sequenced forward on routing" error message is displayed during the certification process for parallel routings when one of the parallel branches is longer than other branch for 4 steps. | Manufacturing | COD 99000752 |
| 340342 | The consumption is missing with backflushing when the output has been previously reversed and per quantity is below rounding precision. | Manufacturing | COD 22 |
| 341858 | The E-mail field in the Customer/Vendor card does not allow more than one Email ID in Business Central on-premises. | Marketing | TAB 18 TAB 23 TAB 36 TAB 5050 Extensions: DynamicsGPDataMigrationV2 |
| 346562 | Power BI embed experience is broken (The length of the string is XXX, but it must be less than or equal to 250 characters). | Sales | COD 6301 PAG 6303 PAG 6304 PAG 6306 TAB 6301 TAB 6302 TAB 6307 |
| 340603 | If you open the Customer Card page from the Sales Order Page, no date filter will be applied. | Sales | PAG 22 PAG 27 PAG 41 PAG 42 PAG 43 PAG 44 PAG 49 PAG 50 PAG 51 PAG 52 PAG 9300 PAG 9301 PAG 9302 PAG 9305 PAG 9308 PAG 9309 TAB 36 TAB 38 |
| 342418 | The Work Description field is not printed in the Standard Credit Memo report. | Sales | REP 1307 |
| 342638 | The Ship-to Country/Region field is incorrect when you use the drop shipment. | Sales | TAB 38 |
| 338240 | If you set a Link Target page to a workflow response, the related notification which is sent does not report the link. | Sales | PAG 1523 |
| 344369 | "The Item does not exist. Identification fields and values: No.='XXX' " error message is displayed when you search on few characters of Item No. in the sales order. | Sales | TAB 27 TAB 37 TAB 39 |
| 340366 | Error message does not display in the item No. that is blocked when the purchasing is blocked. | Warehouse | TAB 39 |
| 342698 | The Available Qty. to Pick fields in the Pick worksheet include quantities that are reserved for other source documents. | Warehouse | COD 7312 COD 7314 TAB 7326 |
| 338913 | A lot of information is lost in the created movement. | Warehouse | COD 7312 REP 7305 |
Local application hotfixes
AT – Austria
| ID | Title | Functional Area | Changed Objects |
|---|---|---|---|
| 344448 | The Intrastat file for January 2020 is not accepted by the authorities because the period is incorrect in the Austrian version. | Finance | REP 11106 |
CZ - Czech
| ID | Title | Functional Area | Changed Objects |
|---|---|---|---|
| 345266 | The Deduction Line No. field is incorrect in the Sales Advance Letter Entries in the Czech version. | Sales | COD 31000 |
| 346240 | "Transaction type must have a value" error message is displayed when you post a sales shipment for an item of type Service in the Czech version. | Sales | PurchaseHeader.Table SalesHeader.Table |
| 343689 | The VAT Entries merge into one line with different VAT date and the same External Document No. field in the VAT Control report in the Czech version. | VAT/Sales Tax/Intrastat | COD 31100 |
| 345703 | The visibility of the Document No. field and checking Series No. field in the VAT Control report in the Czech version. | VAT/Sales Tax/Intrastat | COD 1400 PAG 31075 PAG 31101 |
DACH
| ID | Title | Functional Area | Changed Objects |
|---|---|---|---|
| 341879 | Incorrect INDEX.XML file is in the GDPdU data export when the same table is used multiple times in the DACH version. | Finance | COD 11000 |
| 344448 | The Intrastat file for January 2020 is not accepted by the authorities because the period is incorrect in the DACH version. | Finance | REP 11106 |
DK – Denmark
| ID | Title | Functional Area | Changed Objects |
|---|---|---|---|
| 341093 | The information in the LineExtensionAmount tag of the OIOUBL E-invoicing is incorrect in case a line discount is granted in the Danish version. | Finance | Extensions: OIOUBL |
IT – Italy
| ID | Title | Functional Area | Changed Objects |
|---|---|---|---|
| 341871 | The VAT Exemption No. field should be enlarged in the Italian version. | Finance | COD 12134 PAG 12100 REP 12181 REP 202 REP 206 REP 207 REP 5911 REP 5912 REP 5915 TAB 112 TAB 12186 COD 12184 |
NL – Netherlands
| ID | Title | Functional Area | Changed Objects |
|---|---|---|---|
| 343786 | "The SourceExpr for report control 'NoSourceName' is not valid. ..." error message is displayed when you try to print the Proposal Overview report and use the customer or vendor names with more than 50 characters in the Dutch version. | Finance | PAG 11000002 REP 11000001 REP 11000002 TAB 11000000 TAB 11000002 |
NO – Norway
| ID | Title | Functional Area | Changed Objects |
|---|---|---|---|
| 340140 | If you use the reverse charge VAT and proportional VAT, the transaction does not display correctly in the Trade Settlement report in the Norwegian version. | VAT/Sales Tax/Intrastat | REP 10618 |
Local regulatory features
| ID | Title | Functional Area | Changed Objects | Extensions |
|---|---|---|---|---|
| 330000 | Support electronic tax declaration in the VAT reporting framework. | COD 740 PAG 740 REP 742 TAB 740 COD 11409 COD 11420 COD 11421 COD 11422 COD 11423 COD 11424 COD 11425 PAG 11410 PAG 11416 REP 11405 REP 11408 TAB 11408 TAB 11412 TAB 11413 | Financial Management | NLDigitalTaxDeclaration |
NO – Norway
| ID | Title | Functional Area | Changed Objects | Extensions |
|---|---|---|---|---|
| 341478 | The Payroll functionality can consider zero values like no values in the Norwegian version. | N/A | Financial Management | ImportNOPayroll |
Resolution
How to obtain the Microsoft Dynamics 365 Business Central Spring 2019 files
This update is available for manual download and installation from the Microsoft Download Center.
Cumulative update CU 10 for Microsoft Dynamics 365 Business Central Spring 2019 Update on-premises
Which hotfix package to download
This cumulative update has multiple hotfix packages. Select and download one of the following packages depending on the country version of your Microsoft Dynamics 365 Business Central Spring 2019 database:
| Country | Hotfix package |
|---|---|
| AT - Austria | Download the CU 10 Dynamics 365 Business Central Spring 2019 AT package |
| AU - Australia | Download the CU 10 Dynamics 365 Business Central Spring 2019 AU package |
| BE - Belgium | Download the CU 10 Dynamics 365 Business Central Spring 2019 BE package |
| CH - Switzerland | Download the CU 10 Dynamics 365 Business Central Spring 2019 CH package |
| CZ- Czech | Download the CU 10 Dynamics 365 Business Central Spring 2019 CZ package |
| DE - Germany | Download the CU 10 Dynamics 365 Business Central Spring 2019 DE package |
| DK - Denmark | Download the CU 10 Dynamics 365 Business Central Spring 2019 DK package |
| ES - Spain | Download the CU 10 Dynamics 365 Business Central Spring 2019 ES package |
| FI - Finland | Download the CU 10 Dynamics 365 Business Central Spring 2019 FI package |
| FR - France | Download the CU 10 Dynamics 365 Business Central Spring 2019 FR package |
| IS - Iceland | Download the CU 10 Dynamics 365 Business Central Spring 2019 IS package |
| IT - Italy | Download the CU 10 Dynamics 365 Business Central Spring 2019 IT package |
| NA - North America | Download the CU 10 Dynamics 365 Business Central Spring 2019 NA package |
| NL - Netherlands | Download the CU 10 Dynamics 365 Business Central Spring 2019 NL package |
| NO - Norway | Download the CU 10 Dynamics 365 Business Central Spring 2019 NO package |
| NZ - New Zealand | Download the CU 10 Dynamics 365 Business Central Spring 2019 NZ package |
| RU - Russia | Download the CU 10 Dynamics 365 Business Central Spring 2019 RU package |
| SE - Sweden | Download the CU 10 Dynamics 365 Business Central Spring 2019 SE package |
| UK - United Kingdom | Download the CU 10 Dynamics 365 Business Central Spring 2019 UK package |
| All other countries | Download the CU 10 Dynamics 365 Business Central Spring 2019 W1 package |
How to install a Microsoft Dynamics 365 Business Central Spring 2019 cumulative update
See How to install a Microsoft Dynamics 365 Business Central Spring 2019 cumulative update.
Prerequisites
You must have Microsoft Dynamics 365 Business Central Spring 2019 installed to apply this hotfix.
More information
See more information about software update terminology and Microsoft Dynamics 365 Business Central Spring 2019.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.