Microsoft Azure Devops Server 2022 vulnerabilities

8 known vulnerabilities affecting microsoft/azure_devops_server_2022.

Total CVEs
8
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH5MEDIUM3

Vulnerabilities

Page 1 of 1
CVE-2026-21512MEDIUMCVSS 6.5≥ 20230131.0, < 20260204.32026-02-10
CVE-2026-21512 [MEDIUM] CWE-918 CVE-2026-21512: Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform s Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network.
cvelistv5nvd
CVE-2024-35266HIGHCVSS 7.6≥ 20231128.1, < 20240702.12024-07-09
CVE-2024-35266 [HIGH] CWE-79 Azure DevOps Server Spoofing Vulnerability Azure DevOps Server Spoofing Vulnerability Azure DevOps Server Spoofing Vulnerability
cvelistv5
CVE-2024-35267HIGHCVSS 7.6≥ 20231128.1, < 20240702.12024-07-09
CVE-2024-35267 [HIGH] CWE-79 Azure DevOps Server Spoofing Vulnerability Azure DevOps Server Spoofing Vulnerability Azure DevOps Server Spoofing Vulnerability
cvelistv5
CVE-2024-20667HIGHCVSS 7.5≥ 20231128.1, < 20240126.42024-02-13
CVE-2024-20667 [HIGH] CWE-77 CVE-2024-20667: Azure DevOps Server Remote Code Execution Vulnerability Azure DevOps Server Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2023-21751MEDIUMCVSS 6.5≥ 20231128.1, < 20231128.12023-12-13
CVE-2023-21751 [MEDIUM] CWE-284 Azure DevOps Server Spoofing Vulnerability Azure DevOps Server Spoofing Vulnerability Azure DevOps Server Spoofing Vulnerability
cvelistv5
CVE-2023-21565HIGHCVSS 7.1≥ 20230131.0, < 20230602.42023-06-13
CVE-2023-21565 [HIGH] CWE-79 Azure DevOps Server Spoofing Vulnerability Azure DevOps Server Spoofing Vulnerability Azure DevOps Server Spoofing Vulnerability
cvelistv5
CVE-2023-21569MEDIUMCVSS 5.5≥ 20230131.0, < 20230602.42023-06-13
CVE-2023-21569 [MEDIUM] CWE-94 Azure DevOps Server Spoofing Vulnerability Azure DevOps Server Spoofing Vulnerability Azure DevOps Server Spoofing Vulnerability
cvelistv5
CVE-2023-21564HIGHCVSS 7.1≥ 20230131.0, < 20230131.12023-02-14
CVE-2023-21564 [HIGH] CWE-79 CVE-2023-21564: Azure DevOps Server Cross-Site Scripting Vulnerability Azure DevOps Server Cross-Site Scripting Vulnerability
cvelistv5nvd