Jetbrains Teamcity vulnerabilities
284 known vulnerabilities affecting jetbrains/teamcity.
Total CVEs
284
CISA KEV
4
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL30HIGH59MEDIUM186LOW9
Vulnerabilities
Page 10 of 15
CVE-2022-29927P4MEDIUMCVSS 6.1fixed in 2022.04≥ 2022.04, < 2022.042022-05-12
CVE-2022-29927 [MEDIUM] CWE-79 CVE-2022-29927: In JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possible
In JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possible
nvd
CVE-2019-12844P4MEDIUMCVSS 6.1fixed in 2018.2.32019-07-03
CVE-2019-12844 [MEDIUM] CWE-94 CVE-2019-12844: A possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. The issu
A possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. The issue was fixed in TeamCity 2018.2.3.
nvd
CVE-2020-15830P4MEDIUMCVSS 6.1fixed in 2019.2.32020-08-08
CVE-2020-15830 [MEDIUM] CWE-79 CVE-2020-15830: JetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI.
JetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI.
nvd
CVE-2024-36367P4MEDIUMCVSS 6.1fixed in 2022.04.7≥ 2022.10, < 2022.10.6+3 more2024-05-29
CVE-2024-36367 [MEDIUM] CWE-79 CVE-2024-36367: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via third-party r
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via third-party reports was possible
nvd
CVE-2025-68268P4MEDIUMCVSS 6.1fixed in 2025.11.12025-12-16
CVE-2025-68268 [MEDIUM] CWE-79 CVE-2025-68268: In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings page
In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings page
nvd
CVE-2023-38065P4MEDIUMCVSS 5.4fixed in 2023.05.12023-07-12
CVE-2023-38065 [MEDIUM] CWE-79 CVE-2023-38065: In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible
In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible
nvd
CVE-2025-52875P4MEDIUMCVSS 5.4fixed in 2025.03.32025-06-23
CVE-2025-52875 [MEDIUM] CWE-79 CVE-2025-52875: In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possible
In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possible
nvd
CVE-2020-15829P4MEDIUMCVSS 5.3fixed in 2019.2.32020-08-08
CVE-2020-15829 [MEDIUM] CWE-532 CVE-2020-15829: In JetBrains TeamCity before 2019.2.3, password parameters could be disclosed via build logs.
In JetBrains TeamCity before 2019.2.3, password parameters could be disclosed via build logs.
nvd
CVE-2021-43194P4MEDIUMCVSS 5.3fixed in 2021.1.22021-11-09
CVE-2021-43194 [MEDIUM] CVE-2021-43194: In JetBrains TeamCity before 2021.1.2, user enumeration was possible.
In JetBrains TeamCity before 2021.1.2, user enumeration was possible.
nvd
CVE-2021-43195P4MEDIUMCVSS 5.3fixed in 2021.1.22021-11-09
CVE-2021-43195 [MEDIUM] CVE-2021-43195: In JetBrains TeamCity before 2021.1.2, some HTTP security headers were missing.
In JetBrains TeamCity before 2021.1.2, some HTTP security headers were missing.
nvd
CVE-2021-43198P4MEDIUMCVSS 5.4fixed in 2021.1.22021-11-09
CVE-2021-43198 [MEDIUM] CWE-79 CVE-2021-43198: In JetBrains TeamCity before 2021.1.2, stored XSS is possible.
In JetBrains TeamCity before 2021.1.2, stored XSS is possible.
nvd
CVE-2021-37547P4MEDIUMCVSS 5.3fixed in 2020.2.42021-08-06
CVE-2021-37547 [MEDIUM] CVE-2021-37547: In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made.
In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made.
nvd
CVE-2022-24339P4MEDIUMCVSS 5.4fixed in 2021.2.12022-02-25
CVE-2022-24339 [MEDIUM] CWE-79 CVE-2022-24339: JetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS.
JetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS.
nvd
CVE-2021-43199P4MEDIUMCVSS 5.3fixed in 2021.1.2.2021-11-09
CVE-2021-43199 [MEDIUM] CWE-276 CVE-2021-43199: In JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are insuf
In JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are insufficient.
nvd
CVE-2024-24937P4MEDIUMCVSS 5.4fixed in 2023.11.22024-02-06
CVE-2024-24937 [MEDIUM] CWE-79 CVE-2024-24937: In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible
In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible
nvd
CVE-2024-36374P4MEDIUMCVSS 5.4fixed in 2024.03.22024-05-29
CVE-2024-36374 [MEDIUM] CWE-79 CVE-2024-36374: In JetBrains TeamCity before 2024.03.2 stored XSS via build step settings was possible
In JetBrains TeamCity before 2024.03.2 stored XSS via build step settings was possible
nvd
CVE-2024-36370P4MEDIUMCVSS 5.4fixed in 2022.04.7≥ 2022.10, < 2022.10.6+3 more2024-05-29
CVE-2024-36370 [MEDIUM] CWE-79 CVE-2024-36370: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connect
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connection settings was possible
nvd
CVE-2022-44622P4MEDIUMCVSS 5.3≥ 2021.2, < 2022.10≥ 2022.10, < 2022.10+1 more2022-11-03
CVE-2022-44622 [MEDIUM] CWE-284 CVE-2022-44622: In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health
In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessive
nvd
CVE-2022-38133P4MEDIUMCVSS 5.3fixed in 2022.04.3≥ 2022.04.3, < 2022.04.32022-08-10
CVE-2022-38133 [MEDIUM] CWE-532 CVE-2022-38133: In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in som
In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some cases
nvd
CVE-2022-44646P4MEDIUMCVSS 5.3fixed in 2022.10≥ 2022.10, < 2022.102022-11-03
CVE-2022-44646 [MEDIUM] CWE-223 CVE-2022-44646: In JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's settin
In JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's settings
nvd