Vulnerabilities > Microsoft > Azure Devops Server > High

DATE CVE VULNERABILITY TITLE RISK
2024-07-09 CVE-2024-35266 Unspecified vulnerability in Microsoft Azure Devops Server 2022.1.0
Azure DevOps Server Spoofing Vulnerability
network
low complexity
microsoft
7.6
2024-07-09 CVE-2024-35267 Unspecified vulnerability in Microsoft Azure Devops Server 2022.1.0
Azure DevOps Server Spoofing Vulnerability
network
low complexity
microsoft
7.6
2024-02-13 CVE-2024-20667 Unspecified vulnerability in Microsoft Azure Devops Server 2019.1.2/2020.1.2/2022.1
Azure DevOps Server Remote Code Execution Vulnerability
network
high complexity
microsoft
7.5
2023-10-10 CVE-2023-36561 Unspecified vulnerability in Microsoft Azure Devops Server 2020.0.2/2020.1.2/2022.0.1
Azure DevOps Server Elevation of Privilege Vulnerability
network
low complexity
microsoft
7.3
2023-09-12 CVE-2023-33136 Unspecified vulnerability in Microsoft Azure Devops Server
Azure DevOps Server Remote Code Execution Vulnerability
network
low complexity
microsoft
8.8
2023-09-12 CVE-2023-38155 Unspecified vulnerability in Microsoft Azure Devops Server
Azure DevOps Server Remote Code Execution Vulnerability
network
high complexity
microsoft
8.1
2023-06-14 CVE-2023-21565 Unspecified vulnerability in Microsoft Azure Devops Server 2020.1.2/2022/2022.0.1
Azure DevOps Server Spoofing Vulnerability
network
low complexity
microsoft
7.1
2023-02-14 CVE-2023-21553 Unspecified vulnerability in Microsoft Azure Devops Server 2020.1.2
Azure DevOps Server Remote Code Execution Vulnerability
network
high complexity
microsoft
7.5
2023-02-14 CVE-2023-21564 Cross-site Scripting vulnerability in Microsoft Azure Devops Server 2022
Azure DevOps Server Cross-Site Scripting Vulnerability
network
low complexity
microsoft CWE-79
7.1
2019-09-11 CVE-2019-1306 Improper Input Validation vulnerability in Microsoft Azure Devops Server and Team Foundation Server
A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'.
network
low complexity
microsoft CWE-20
7.5