JetBrains

Records788All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical84CVSS 9.0–10.0

CVSS high249CVSS 7.0–8.9

Exploited now

JetBrains records in CISA KEV

TI-2026-45031 JetBrains TeamCity Deserialization of Untrusted Data Vulnerability CRITICAL 100KEV 2026-08-05 TI-2024-18054 JetBrains TeamCity Relative Path Traversal Vulnerability CRITICAL 89KEV 2026-04-20 TI-2024-18053 JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL 100KEV 2024-03-07 TI-2023-22884 JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL 100KEV 2023-10-04

Components

Products in the NVD configurations · select one to filter the records

Teamcity 283 records CRITICAL Youtrack 157 records MEDIUM Intellij Idea 77 records HIGH Hub 37 records MEDIUM Ktor 21 records MEDIUM Pycharm 12 records HIGH Toolbox 11 records MEDIUM Rider 9 records HIGH

Records

283 records in Teamcity · all components

TI-2026-45031 CVE-2026-63077 · GHSA-94gx-v738-fx9w

Deserialization of untrusted data in JetBrains TeamCity

CRITICAL 100KEV

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.94887 Published 2026-07-27 Fixed in 2026.1.3, 2025.11.7 CWE-502

TI-2024-18053 CVE-2024-27198 · GHSA-xh94-49wq-7h2h

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

CRITICAL 100KEV

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99938 Published 2024-03-04 Fixed in 2023.11.4 CWE-288

TI-2023-22884 CVE-2023-42793 · GHSA-w796-2gq9-7jm8

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

CRITICAL 100KEV

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99987 Published 2023-09-19 Fixed in 2023.05.4 CWE-288

TI-2024-18054 CVE-2024-27199 · GHSA-m7gg-q7qj-3r2r

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

CRITICAL 89KEV

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.99991 Published 2024-03-04 Fixed in 2023.11.4 CWE-23

TI-2024-15905 CVE-2024-23917 · GHSA-73v5-rhgg-73mq

In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible

HIGH 82

In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.54009 Published 2024-02-06 Fixed in 2023.11.3 CWE-288

TI-2015-01192 CVE-2015-1313 · GHSA-qjwq-qh5c-p96w

JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions…

HIGH 68

JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced by reading HTML and JavaScript files that are returned to the…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00615 Published 2023-06-29 Fixed in 9.0.2 CWE-425

TI-2026-36546 CVE-2026-49373 · GHSA-hqxf-vmvp-qr3c

In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings

HIGH 65

In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.32685 Published 2026-05-29 Fixed in 2026.1 CWE-88

TI-2025-29324 CVE-2025-46618 · GHSA-pp4f-j97h-vw3x

In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab

MEDIUM 63

In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.63034 Published 2025-04-25 Fixed in 2025.03.1 CWE-79

TI-2024-20518 CVE-2024-31138 · GHSA-rxxr-85xg-h73w

In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings

MEDIUM 63

In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.74689 Published 2024-03-28 Fixed in 2024.03 CWE-79

TI-2022-24013 CVE-2022-48428 · GHSA-743v-34hm-9834

In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible

MEDIUM 61

In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.6796 Published 2023-03-27 Fixed in 2022.10.3 CWE-79

TI-2022-23957 CVE-2022-48343 · GHSA-3wfv-3cfc-9mjc

In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.

MEDIUM 61

In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.59462 Published 2023-02-23 Fixed in 2022.10.2 CWE-79

TI-2023-21855 CVE-2023-41249 · GHSA-4c37-p59v-2r8g

In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step

MEDIUM 60

In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.55527 Published 2023-08-25 Fixed in 2023.05.3 CWE-79

TI-2023-17061 CVE-2023-34225 · GHSA-8ppw-44ph-hpfq

In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible

MEDIUM 59

In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.6072 Published 2023-05-31 Fixed in 2023.05 CWE-79

TI-2023-17056 CVE-2023-34220 · GHSA-ggq6-w2w9-jjw6

In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible

MEDIUM 59

In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.61433 Published 2023-05-31 Fixed in 2023.05 CWE-79

TI-2024-32192 CVE-2024-47949 · GHSA-h2p8-f2v7-2g2m

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location

MEDIUM 57

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.32121 Published 2024-10-08 Fixed in 2024.07.3 CWE-23

TI-2019-11225 CVE-2019-15039 · GHSA-9c64-9g78-4v29

An issue was discovered in JetBrains TeamCity 2018.2.4.

MEDIUM 57

An issue was discovered in JetBrains TeamCity 2018.2.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13052 Published 2019-10-01 No fix listed CWE-22

TI-2024-16449 CVE-2024-24942 · GHSA-2j7g-cpcm-93qx

In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives

MEDIUM 54

In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.31977 Published 2024-02-06 Fixed in 2023.11.3 CWE-23

TI-2025-32912 CVE-2025-52876 · GHSA-vcp6-7gvp-w68h

In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible

MEDIUM 51

In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.38598 Published 2025-06-23 Fixed in 2025.03.3 CWE-79

TI-2025-22401 CVE-2025-31140 · GHSA-w2c7-4rv6-wc59

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page

MEDIUM 50

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.28035 Published 2025-03-27 Fixed in 2025.03 CWE-79

TI-2023-17054 CVE-2023-34218 · GHSA-55qq-x3mf-mhr9

In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible

MEDIUM 50

In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00593 Published 2023-05-31 Fixed in 2023.05 CWE-863

TI-2025-32913 CVE-2025-52877 · GHSA-vq9w-vqhr-x7qh

In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible

MEDIUM 48

In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.36966 Published 2025-06-23 Fixed in 2025.03.3 CWE-79

TI-2021-11903 CVE-2021-31915 · GHSA-439g-6pcw-pgj7

In JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible.

MEDIUM 48

In JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03213 Published 2021-05-11 No fix listed CWE-78

TI-2021-11897 CVE-2021-31909 · GHSA-97gq-9pf7-vwvc

In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possible.

MEDIUM 48

In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possible.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03234 Published 2021-05-11 No fix listed CWE-88

TI-2019-13367 CVE-2019-18364 · GHSA-h356-6jhc-7262

In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution.

MEDIUM 48

In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03515 Published 2019-10-31 No fix listed CWE-502

TI-2022-08969 CVE-2022-25263 · GHSA-9fwj-4m6v-3gj8

JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration.

MEDIUM 46

JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02044 Published 2022-02-25 No fix listed CWE-78

Open these records in search →