What’s Vulnerable › Vulnerabilities

CVE-2019-1008

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-16 · updated 2026-06-17

Description

A security feature bypass vulnerability exists in Dynamics On Premise, aka 'Microsoft Dynamics On-Premise Security Feature Bypass'.

Affected products

• Microsoft Dynamics 365 (on-premises) version 9.0: 8.2, 9.0
• Microsoft Dynamics CRM 2015 (on-premises) version 7.0: 7.0
• Microsoft Dynamics 365 (on-premises) version 9.0: 8.2, 9.0
• Microsoft Dynamics CRM 2015 (on-premises): 7.0

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1008
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1008

Get alerted when CVE-2019-1008 or the next vulnerability affects your stack