Vulnerabilities > Jetbrains > Teamcity > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-09-05 | CVE-2019-15848 | Cross-site Scripting vulnerability in Jetbrains Teamcity 2019.1/2019.1.1 JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request to a TeamCity server under the name of the currently logged-in user. | 6.1 |
| 2019-07-03 | CVE-2019-12846 | Unspecified vulnerability in Jetbrains Teamcity A user without the required permissions could gain access to some JetBrains TeamCity settings. | 4.3 |
| 2019-07-03 | CVE-2019-12845 | Improper Authentication vulnerability in Jetbrains Teamcity The generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving artifacts. | 5.3 |
| 2019-07-03 | CVE-2019-12844 | Code Injection vulnerability in Jetbrains Teamcity A possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. | 6.1 |
| 2019-07-03 | CVE-2019-12843 | Code Injection vulnerability in Jetbrains Teamcity A possible stored JavaScript injection requiring a deliberate server administrator action was detected. | 6.1 |
| 2019-07-03 | CVE-2019-12842 | Cross-site Scripting vulnerability in Jetbrains Teamcity A reflected XSS on a user page was detected on one of the JetBrains TeamCity pages. | 6.1 |