Jetbrains Teamcity vulnerabilities
284 known vulnerabilities affecting jetbrains/teamcity.
Total CVEs
284
CISA KEV
4
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL30HIGH59MEDIUM186LOW9
Vulnerabilities
Page 7 of 15
CVE-2025-68165P4MEDIUMCVSS 6.1fixed in 2025.112025-12-16
CVE-2025-68165 [MEDIUM] CWE-79 CVE-2025-68165: In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup
In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup
nvd
CVE-2022-24337P4MEDIUMCVSS 6.5fixed in 2021.22022-02-25
CVE-2022-24337 [MEDIUM] CWE-276 CVE-2022-24337: In JetBrains TeamCity before 2021.2, health items of pull requests were shown to users who lacked ap
In JetBrains TeamCity before 2021.2, health items of pull requests were shown to users who lacked appropriate permissions.
nvd
CVE-2022-24333P4MEDIUMCVSS 6.5fixed in 2021.22022-02-25
CVE-2022-24333 [MEDIUM] CWE-918 CVE-2022-24333: In JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible.
In JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible.
nvd
CVE-2020-15828P4MEDIUMCVSS 6.5fixed in 2020.1.12020-08-08
CVE-2020-15828 [MEDIUM] CVE-2020-15828: In JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user without a
In JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user without appropriate permissions.
nvd
CVE-2025-57732P4MEDIUMCVSS 6.3fixed in 2025.07.12025-08-20
CVE-2025-57732 [MEDIUM] CWE-282 CVE-2025-57732: In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory
In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownership
nvd
CVE-2020-11688P4HIGHCVSS 7.5fixed in 2019.2.12020-04-22
CVE-2020-11688 [HIGH] CWE-613 CVE-2020-11688: In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his ses
In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session.
nvd
CVE-2022-24336P4MEDIUMCVSS 5.3fixed in 2021.2.12022-02-25
CVE-2022-24336 [MEDIUM] CVE-2022-24336: In JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via an
In JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via an XML-RPC request to the TeamCity server.
nvd
CVE-2020-11689P4MEDIUMCVSS 6.5fixed in 2019.2.12020-04-22
CVE-2020-11689 [MEDIUM] CWE-276 CVE-2020-11689: In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import set
In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the settings.kts file.
nvd
CVE-2026-59795P4MEDIUMCVSS 6.1fixed in 2026.1.22026-07-10
CVE-2026-59795 [MEDIUM] CWE-79 CVE-2026-59795: In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible
In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible
nvd
CVE-2025-47851P4MEDIUMCVSS 5.4fixed in 2025.03.22025-05-20
CVE-2025-47851 [MEDIUM] CWE-79 CVE-2025-47851: In JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possible
In JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possible
nvd
CVE-2024-47951P4MEDIUMCVSS 5.4fixed in 2024.07.32024-10-08
CVE-2024-47951 [MEDIUM] CWE-79 CVE-2024-47951: In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings
In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings
nvd
CVE-2025-54538P4MEDIUMCVSS 5.5fixed in 2025.072025-07-28
CVE-2025-54538 [MEDIUM] CWE-312 CVE-2025-54538: In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull
In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command
nvd
CVE-2024-24938P4MEDIUMCVSS 5.3fixed in 2023.11.22024-02-06
CVE-2024-24938 [MEDIUM] CWE-23 CVE-2024-24938: In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL do
In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation
nvd
CVE-2026-59794P4MEDIUMCVSS 5.4fixed in 2026.1.22026-07-10
CVE-2026-59794 [MEDIUM] CWE-79 CVE-2026-59794: In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-re
In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data
nvd
CVE-2024-31140P4MEDIUMCVSS 4.9fixed in 2024.032024-03-28
CVE-2024-31140 [MEDIUM] CWE-1288 CVE-2024-31140: In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the ser
In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the server by installing tools
nvd
CVE-2025-24459P4MEDIUMCVSS 6.1fixed in 2024.12.12025-01-21
CVE-2025-24459 [MEDIUM] CWE-79 CVE-2025-24459: In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page
In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page
nvd
CVE-2026-49375P4MEDIUMCVSS 6.1fixed in 2025.11.5fixed in 2026.1,
2025.11.52026-05-29
CVE-2026-49375 [MEDIUM] CWE-79 CVE-2026-49375: In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository downloa
In JetBrains TeamCity before 2026.1,
2025.11.5 reflected XSS was possible on the repository download page
nvd
CVE-2024-47950P4MEDIUMCVSS 5.4fixed in 2024.07.03fixed in 2024.07.32024-10-08
CVE-2024-47950 [MEDIUM] CWE-79 CVE-2024-47950: In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings
In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings
nvd
CVE-2026-111095P4MEDIUMCVSS 5.4fixed in 2025.11.8≥ 2026.1, < 2026.1.4+1 more2026-10-15
CVE-2026-111095 [MEDIUM] CWE-79 CVE-2026-111095: In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overvie
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 stored XSS in the classic project overview was possible
nvd
CVE-2024-24936P4MEDIUMCVSS 5.3fixed in 2023.11.22024-02-06
CVE-2024-24936 [MEDIUM] CWE-285 CVE-2024-24936: In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was
In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed
nvd