Microsoft Azure Devops Server vulnerabilities
33 known vulnerabilities affecting microsoft/azure_devops_server.
Total CVEs
33
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH9MEDIUM22
Vulnerabilities
Page 2 of 2
CVE-2019-0870P4MEDIUMCVSS 6.1v20192019-04-09
CVE-2019-0870 [MEDIUM] CVE-2019-0870: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Serve
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0868, CVE-2019-0871.
nvd
CVE-2019-0871P4MEDIUMCVSS 6.1v20192019-04-09
CVE-2019-0871 [MEDIUM] CVE-2019-0871: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Serve
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0868, CVE-2019-0870.
nvd
CVE-2019-0867P4MEDIUMCVSS 6.1v20192019-04-09
CVE-2019-0867 [MEDIUM] CVE-2019-0867: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Serve
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0868, CVE-2019-0870, CVE-2019-0871.
nvd
CVE-2019-0874P4MEDIUMCVSS 6.1v20192019-04-09
CVE-2019-0874 [MEDIUM] CWE-79 CVE-2019-0874: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitiz
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
nvd
CVE-2019-0979P4MEDIUMCVSS 5.4v20192019-05-16
CVE-2019-0979 [MEDIUM] CVE-2019-0979: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Serve
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0872.
nvd
CVE-2019-0872P4MEDIUMCVSS 5.4v20192019-05-16
CVE-2019-0872 [MEDIUM] CWE-79 CVE-2019-0872: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Serve
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0979.
nvd
CVE-2019-1076P4MEDIUMCVSS 5.4v2019.0.12019-07-15
CVE-2019-1076 [MEDIUM] CWE-79 CVE-2019-1076: A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sani
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
nvd
CVE-2019-1305P4MEDIUMCVSS 5.4v2019.0.12019-09-11
CVE-2019-1305 [MEDIUM] CWE-79 CVE-2019-1305: A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sani
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
nvd
CVE-2020-1325P4MEDIUMCVSS 5.4v20192020-11-11
CVE-2020-1325 [MEDIUM] CVE-2020-1325: Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
nvd
CVE-2020-1326P4MEDIUMCVSS 5.4v2019v2019.0.12020-07-14
CVE-2020-1326 [MEDIUM] CWE-79 CVE-2020-1326: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitiz
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
nvd
CVE-2020-17145P4MEDIUMCVSS 5.4v2019v2019.0.1+1 more2020-12-10
CVE-2020-17145 [MEDIUM] CVE-2020-17145: Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
nvd
CVE-2020-0700P4MEDIUMCVSS 5.4v2019.0.12020-03-12
CVE-2020-0700 [MEDIUM] CWE-79 CVE-2020-0700: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitiz
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
nvd
CVE-2023-36869MEDIUMCVSS 6.3≥ 1.0.0, < 20230601.12023-08-08
CVE-2023-36869 [MEDIUM] CWE-79 Azure DevOps Server Spoofing Vulnerability
Azure DevOps Server Spoofing Vulnerability
Azure DevOps Server Spoofing Vulnerability
cvelistv5
← Previous2 / 2