Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

40 records

Vendor: Microsoft Component: Azure Devops Server Clear all filters
TI-2026-17366 CVE-2026-21512 · GHSA-532f-36vx-gpxx

Azure DevOps Server Cross-Site Scripting Vulnerability

Priority LOW 31

Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01011 Published 2026-02-10 Fixed in 20260204.3 CWE-918
TI-2024-23330 CVE-2024-35267 · GHSA-qcph-65j4-4x3j

Azure DevOps Server Spoofing Vulnerability

Priority LOW 36

Azure DevOps Server Spoofing Vulnerability

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.01582 Published 2024-07-09 Fixed in 20240702.1 CWE-79
TI-2024-23329 CVE-2024-35266 · GHSA-9wrg-j73q-q95r

Azure DevOps Server Spoofing Vulnerability

Priority LOW 36

Azure DevOps Server Spoofing Vulnerability

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.01582 Published 2024-07-09 Fixed in 20240702.1 CWE-79
TI-2023-08133 CVE-2023-21751 · GHSA-5jwq-f7w6-hjc7

Azure DevOps Server Spoofing Vulnerability

Priority LOW 31

Azure DevOps Server Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00977 Published 2023-12-13 Fixed in 20231128.1, 20231127.4 CWE-284
TI-2023-18658 CVE-2023-36869 · GHSA-r47r-3chg-8pxv

Azure DevOps Server Spoofing Vulnerability

Priority LOW 29

Azure DevOps Server Spoofing Vulnerability

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00699 Published 2023-08-08 Fixed in 20230601.1, 20230721.6 +2 CWE-79
TI-2023-07963 CVE-2023-21569 · GHSA-69vr-3mjj-cwh7

Azure DevOps Server Spoofing Vulnerability

Priority LOW 26

Azure DevOps Server Spoofing Vulnerability

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00684 Published 2023-06-13 Fixed in 20230601.3, 20230602.4 +1 CWE-94
TI-2023-07959 CVE-2023-21565 · GHSA-hwmh-fp5g-pqmr

Azure DevOps Server Spoofing Vulnerability

Priority LOW 33

Azure DevOps Server Spoofing Vulnerability

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00933 Published 2023-06-13 Fixed in 20230602.4, 20230601.3 +1 CWE-79
TI-2021-09574 CVE-2021-28459 · GHSA-xhcw-5f8j-45f2

Azure DevOps Server Spoofing Vulnerability

Priority LOW 32

Azure DevOps Server Spoofing Vulnerability

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02317 Published 2021-04-13 Fixed in publication CWE-79
TI-2020-13109 CVE-2020-17135 · GHSA-55r5-f664-q4f7

Azure DevOps Server Spoofing Vulnerability

Priority LOW 31

Azure DevOps Server Spoofing Vulnerability

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.01333 Published 2020-12-09 Fixed in publication
TI-2020-01288 CVE-2020-1326 · GHSA-j682-xgwv-63h4

Cross-site scripting in Microsoft Azure DevOps Server

Priority LOW 28

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01565 Published 2020-07-14 No fix listed CWE-79
TI-2020-01289 CVE-2020-1327 · GHSA-p4m2-x92c-xpph

Cross-site scripting in Microsoft Azure DevOps Server

Priority LOW 31

A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01866 Published 2020-06-09 No fix listed CWE-79
TI-2020-00790 CVE-2020-0815 · GHSA-pg6g-7pwc-wmq6

An elevation of privilege vulnerability exists when Azure DevOps Server and Team…

Priority LOW 37

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vul…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01837 Published 2020-03-12 No fix listed
TI-2020-00733 CVE-2020-0758 · GHSA-f545-q9v5-fj94

An elevation of privilege vulnerability exists when Azure DevOps Server and Team…

Priority LOW 37

An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vul…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02015 Published 2020-03-12 No fix listed
TI-2020-00675 CVE-2020-0700 · GHSA-vqxj-cwvp-vwpq

Cross-site scripting in Microsoft Azure DevOps Server

Priority LOW 27

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01328 Published 2020-03-12 No fix listed CWE-79
TI-2019-01021 CVE-2019-1306 · GHSA-wvw6-4r49-h4g6

Improper input validation in Microsoft Team Foundation Server 2018

Priority MEDIUM 59

A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerabili…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16988 Published 2019-09-11 No fix listed CWE-20
TI-2019-01020 CVE-2019-1305 · GHSA-33xh-mrrx-855g

Cross-site scripting in Microsoft Team Foundation Server

Priority LOW 28

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01535 Published 2019-09-11 No fix listed CWE-79
Load more