Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Azure Devops Server
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-1325 1 Microsoft 1 Azure Devops Server 2023-12-31 5.5 MEDIUM 5.4 MEDIUM
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
CVE-2020-17145 1 Microsoft 2 Azure Devops Server, Team Foundation Server 2023-12-31 4.9 MEDIUM 5.4 MEDIUM
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
CVE-2020-17135 1 Microsoft 1 Azure Devops Server 2023-12-30 4.9 MEDIUM 6.4 MEDIUM
Azure DevOps Server Spoofing Vulnerability
CVE-2021-27067 1 Microsoft 2 Azure Devops Server, Team Foundation Server 2023-12-29 4.0 MEDIUM 6.5 MEDIUM
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
CVE-2021-28459 1 Microsoft 1 Azure Devops Server 2023-12-29 4.3 MEDIUM 6.1 MEDIUM
Azure DevOps Server Spoofing Vulnerability
CVE-2023-21751 1 Microsoft 1 Azure Devops Server 2023-12-18 N/A 6.5 MEDIUM
Azure DevOps Server Spoofing Vulnerability
CVE-2023-36869 1 Microsoft 1 Azure Devops Server 2023-08-11 N/A 6.3 MEDIUM
Azure DevOps Server Spoofing Vulnerability
CVE-2020-1327 1 Microsoft 1 Azure Devops Server 2021-07-21 4.3 MEDIUM 6.1 MEDIUM
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
CVE-2019-0857 1 Microsoft 1 Azure Devops Server 2020-08-24 4.3 MEDIUM 6.5 MEDIUM
A spoofing vulnerability that could allow a security feature bypass exists in when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Spoofing Vulnerability'.
CVE-2019-0869 1 Microsoft 1 Azure Devops Server 2020-08-24 4.3 MEDIUM 6.1 MEDIUM
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
CVE-2019-0971 1 Microsoft 2 Azure Devops Server, Team Foundation Server 2020-08-24 9.0 HIGH 6.5 MEDIUM
An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'.
CVE-2020-1326 1 Microsoft 1 Azure Devops Server 2020-07-15 3.5 LOW 5.4 MEDIUM
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVE-2020-0700 1 Microsoft 2 Azure Devops Server, Team Foundation Server 2020-03-16 3.5 LOW 5.4 MEDIUM
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVE-2019-1305 1 Microsoft 2 Azure Devops Server, Team Foundation Server 2019-09-13 3.5 LOW 5.4 MEDIUM
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
CVE-2019-1076 1 Microsoft 2 Azure Devops Server, Team Foundation Server 2019-07-18 3.5 LOW 5.4 MEDIUM
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
CVE-2019-0871 1 Microsoft 2 Azure Devops Server, Team Foundation Server 2019-07-16 4.3 MEDIUM 6.1 MEDIUM
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0868, CVE-2019-0870.
CVE-2019-0870 1 Microsoft 2 Azure Devops Server, Team Foundation Server 2019-07-16 4.3 MEDIUM 6.1 MEDIUM
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0868, CVE-2019-0871.
CVE-2019-0868 1 Microsoft 2 Azure Devops Server, Team Foundation Server 2019-07-16 4.3 MEDIUM 6.1 MEDIUM
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0870, CVE-2019-0871.
CVE-2019-0867 1 Microsoft 2 Azure Devops Server, Team Foundation Server 2019-07-16 4.3 MEDIUM 6.1 MEDIUM
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0868, CVE-2019-0870, CVE-2019-0871.
CVE-2019-0996 1 Microsoft 1 Azure Devops Server 2019-07-16 4.3 MEDIUM 6.5 MEDIUM
A spoofing vulnerability exists in Azure DevOps Server when it improperly handles requests to authorize applications, resulting in a cross-site request forgery, aka 'Azure DevOps Server Spoofing Vulnerability'.
CVE-2019-0866 1 Microsoft 2 Azure Devops Server, Team Foundation Server 2019-07-16 4.3 MEDIUM 6.1 MEDIUM
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0867, CVE-2019-0868, CVE-2019-0870, CVE-2019-0871.
CVE-2019-0979 1 Microsoft 2 Azure Devops Server, Team Foundation Server 2019-07-16 3.5 LOW 5.4 MEDIUM
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0872.
CVE-2019-0874 1 Microsoft 1 Azure Devops Server 2019-07-16 4.3 MEDIUM 6.1 MEDIUM
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
CVE-2019-0872 1 Microsoft 2 Azure Devops Server, Team Foundation Server 2019-07-16 3.5 LOW 5.4 MEDIUM
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0979.