Vulnerabilities > Microsoft > Azure Devops Server > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-12-14 CVE-2023-21751 Unspecified vulnerability in Microsoft Azure Devops Server 2020.1.2/2022.1.0
Azure DevOps Server Spoofing Vulnerability
network
low complexity
microsoft
6.5
2023-08-08 CVE-2023-36869 Unspecified vulnerability in Microsoft Azure Devops Server
Azure DevOps Server Spoofing Vulnerability
network
low complexity
microsoft
6.3
2023-06-14 CVE-2023-21569 Unspecified vulnerability in Microsoft Azure Devops Server 2020.1.2/2022/2022.0.1
Azure DevOps Server Spoofing Vulnerability
network
low complexity
microsoft
5.5
2021-04-13 CVE-2021-28459 Cross-site Scripting vulnerability in Microsoft Azure Devops Server 2020.0.1
Azure DevOps Server Spoofing Vulnerability
network
low complexity
microsoft CWE-79
6.1
2021-04-13 CVE-2021-27067 Unspecified vulnerability in Microsoft Azure Devops Server and Team Foundation Server
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
network
low complexity
microsoft
6.5
2020-12-10 CVE-2020-17145 Unspecified vulnerability in Microsoft Azure Devops Server and Team Foundation Server
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
network
low complexity
microsoft
5.4
2020-12-10 CVE-2020-17135 Unspecified vulnerability in Microsoft Azure Devops Server 2019/2019.0.1
Azure DevOps Server Spoofing Vulnerability
network
low complexity
microsoft
6.4
2020-11-11 CVE-2020-1325 Unspecified vulnerability in Microsoft Azure Devops Server 2019
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
network
low complexity
microsoft
5.4
2020-06-09 CVE-2020-1327 Injection vulnerability in Microsoft Azure Devops Server 2019/2019.0.1
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
network
microsoft CWE-74
4.3
2020-03-12 CVE-2020-0815 Improper Privilege Management vulnerability in Microsoft Azure Devops Server 2019
An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'.
network
microsoft CWE-269
6.0