Vulnerabilities > Microsoft > Azure Devops Server

DATE CVE VULNERABILITY TITLE RISK
2023-02-14 CVE-2023-21553 Unspecified vulnerability in Microsoft Azure Devops Server 2020.1.2
Azure DevOps Server Remote Code Execution Vulnerability
network
high complexity
microsoft
7.5
2023-02-14 CVE-2023-21564 Cross-site Scripting vulnerability in Microsoft Azure Devops Server 2022
Azure DevOps Server Cross-Site Scripting Vulnerability
network
low complexity
microsoft CWE-79
7.1
2021-04-13 CVE-2021-28459 Cross-site Scripting vulnerability in Microsoft Azure Devops Server 2020.0.1
Azure DevOps Server Spoofing Vulnerability
network
low complexity
microsoft CWE-79
6.1
2021-04-13 CVE-2021-27067 Unspecified vulnerability in Microsoft Azure Devops Server and Team Foundation Server
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
network
low complexity
microsoft
6.5
2020-12-10 CVE-2020-17145 Unspecified vulnerability in Microsoft Azure Devops Server and Team Foundation Server
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
network
low complexity
microsoft
5.4
2020-12-10 CVE-2020-17135 Unspecified vulnerability in Microsoft Azure Devops Server 2019/2019.0.1
Azure DevOps Server Spoofing Vulnerability
network
low complexity
microsoft
6.4
2020-11-11 CVE-2020-1325 Unspecified vulnerability in Microsoft Azure Devops Server 2019
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
network
low complexity
microsoft
5.4
2020-07-14 CVE-2020-1326 Cross-site Scripting vulnerability in Microsoft Azure Devops Server 2019/2019.0.1
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
network
low complexity
microsoft CWE-79
5.4
2020-06-09 CVE-2020-1327 Cross-site Scripting vulnerability in Microsoft Azure Devops Server 2019/2019.0.1
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
network
low complexity
microsoft CWE-79
6.1
2020-03-12 CVE-2020-0815 Unspecified vulnerability in Microsoft Azure Devops Server 2019
An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'.
network
high complexity
microsoft
7.5