Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

microsoft team foundation server 2018 vulnerabilities and exploits

(subscribe to this query)

6.5
CVSSv3
CVE-2021-27067
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability...
Microsoft Team Foundation Server 2018Microsoft Team Foundation Server 2017Microsoft Team Foundation Server 2015Microsoft Azure Devops Server 2019Microsoft Azure Devops Server 2019.0.1Microsoft Azure Devops Server 2020
5.4
CVSSv3
CVE-2020-17145
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability...
Microsoft Team Foundation Server 2015Microsoft Team Foundation Server 2017Microsoft Team Foundation Server 2018Microsoft Azure Devops Server 2019Microsoft Azure Devops Server 2019.0.1Microsoft Azure Devops Server 2020
7.5
CVSSv3
CVE-2020-0758
An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from...
Microsoft Team Foundation Server 2017Microsoft Team Foundation Server 2018Microsoft Azure Devops Server 2019Microsoft Azure Devops Server 2019.0.1
5.4
CVSSv3
CVE-2020-0700
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'....
Microsoft Team Foundation Server 2017Microsoft Team Foundation Server 2018Microsoft Azure Devops Server 2019.0.1
5.4
CVSSv3
CVE-2019-1305
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'....
Microsoft Team Foundation Server 2018Microsoft Team Foundation Server 2017Microsoft Team Foundation Server 2015Microsoft Azure Devops Server 2019.0.1
9.8
CVSSv3
CVE-2019-1306
A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'....
Microsoft Azure Devops Server 2019Microsoft Azure Devops Server 2019.0.1Microsoft Team Foundation Server 2018
9.8
CVSSv3
CVE-2019-1072
A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'....
Microsoft Team Foundation Server 2018Microsoft Azure Devops Server 2019.0.1Microsoft Team Foundation Server 2010Microsoft Team Foundation Server 2012Microsoft Team Foundation Server 2013Microsoft Team Foundation Server 2017Microsoft Team Foundation Server 2015
5.4
CVSSv3
CVE-2019-1076
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'....
Microsoft Azure Devops Server 2019.0.1Microsoft Team Foundation Server 2018
5.4
CVSSv3
CVE-2019-0872
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from...
Microsoft Azure Devops Server 2019Microsoft Team Foundation Server 2015Microsoft Team Foundation Server 2017Microsoft Team Foundation Server 2018
5.4
CVSSv3
CVE-2019-0979
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from...
Microsoft Team Foundation Server 2018Microsoft Azure Devops Server 2019Microsoft Team Foundation Server 2017
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
log injectionCVE-2022-31656CVE-2022-37006CVE-2022-34713wirelessCVE-2022-37007SQL injectionCVE-2022-32429CVE-2022-37024
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook