CVE-2024-30047: Dynamics 365 Customer Insights Spoofing Vulnerability

Severity: medium (CVSS 4.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-05-14 · updated 2026-06-17
Weakness: CWE-79

Description

Dynamics 365 Customer Insights Spoofing Vulnerability

Affected products

Microsoft Dynamics 365: before 1.38813.80 — fixed in 1.38813.80
Microsoft Dynamics 365 (on-premises) version 9.0: from 10.0.0 before 1.38813.80 — fixed in 1.38813.80

How to fix

Upgrade to a fixed version: Microsoft Dynamics 365 1.38813.80; Microsoft Dynamics 365 (on-premises) version 9.0 1.38813.80. Check the vendor advisory for mitigations.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30047
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30047

Get alerted when CVE-2024-30047 or the next vulnerability affects your stack