Vulnerabilities > Jetbrains > Teamcity > 2017.1.4

DATE CVE VULNERABILITY TITLE RISK
2021-11-09 CVE-2021-43195 Unspecified vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2021.1.2, some HTTP security headers were missing.
network
low complexity
jetbrains
5.3
2021-11-09 CVE-2021-43196 Unspecified vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2021.1, information disclosure via the Docker Registry connection dialog is possible.
network
low complexity
jetbrains
7.5
2021-11-09 CVE-2021-43197 Cross-site Scripting vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.
network
low complexity
jetbrains CWE-79
6.1
2021-11-09 CVE-2021-43198 Cross-site Scripting vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2021.1.2, stored XSS is possible.
network
low complexity
jetbrains CWE-79
5.4
2021-11-09 CVE-2021-43199 Incorrect Default Permissions vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are insufficient.
network
low complexity
jetbrains CWE-276
5.3
2021-11-09 CVE-2021-43200 Unspecified vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2021.1.2, permission checks in the Agent Push functionality were insufficient.
network
low complexity
jetbrains
critical
9.8
2021-11-09 CVE-2021-43201 Unspecified vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2021.1.3, a newly created project could take settings from an already deleted project.
network
low complexity
jetbrains
5.3
2021-08-06 CVE-2021-37542 Cross-site Scripting vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2020.2.3, XSS was possible.
network
low complexity
jetbrains CWE-79
6.1
2021-08-06 CVE-2021-37544 Deserialization of Untrusted Data vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization.
network
low complexity
jetbrains CWE-502
critical
9.8
2021-08-06 CVE-2021-37545 Improper Authentication vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made.
network
low complexity
jetbrains CWE-287
7.5