Vulnerabilities > Microsoft > Azure Devops Server > 2019.0.1

DATE CVE VULNERABILITY TITLE RISK
2023-09-12 CVE-2023-33136 Unspecified vulnerability in Microsoft Azure Devops Server
Azure DevOps Server Remote Code Execution Vulnerability
network
low complexity
microsoft
8.8
2023-09-12 CVE-2023-38155 Unspecified vulnerability in Microsoft Azure Devops Server
Azure DevOps Server Remote Code Execution Vulnerability
network
high complexity
microsoft
8.1
2023-08-08 CVE-2023-36869 Unspecified vulnerability in Microsoft Azure Devops Server
Azure DevOps Server Spoofing Vulnerability
network
low complexity
microsoft
6.3
2021-04-13 CVE-2021-27067 Unspecified vulnerability in Microsoft Azure Devops Server and Team Foundation Server
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
network
low complexity
microsoft
6.5
2020-12-10 CVE-2020-17145 Unspecified vulnerability in Microsoft Azure Devops Server and Team Foundation Server
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
network
low complexity
microsoft
5.4
2020-12-10 CVE-2020-17135 Unspecified vulnerability in Microsoft Azure Devops Server 2019/2019.0.1
Azure DevOps Server Spoofing Vulnerability
network
low complexity
microsoft
6.4
2020-07-14 CVE-2020-1326 Cross-site Scripting vulnerability in Microsoft Azure Devops Server 2019/2019.0.1
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
network
microsoft CWE-79
3.5
2020-06-09 CVE-2020-1327 Injection vulnerability in Microsoft Azure Devops Server 2019/2019.0.1
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
network
microsoft CWE-74
4.3
2020-03-12 CVE-2020-0758 Improper Privilege Management vulnerability in Microsoft Azure Devops Server and Team Foundation Server
An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'.
network
microsoft CWE-269
6.0
2020-03-12 CVE-2020-0700 Cross-site Scripting vulnerability in Microsoft Azure Devops Server and Team Foundation Server
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
network
microsoft CWE-79
3.5