Vulnerabilities > Microsoft > Team Foundation Server > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-05-16 CVE-2019-0971 Improper Encoding or Escaping of Output vulnerability in Microsoft Azure Devops Server and Team Foundation Server
An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'.
network
low complexity
microsoft CWE-116
critical
9.0