Microsoft / Azure Devops Server
40 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-21512 | Azure DevOps Server Cross-Site Scripting Vulnerability | MEDIUM | 6.5 | Feb 10, 2026 |
| CVE-2024-35267 | Azure DevOps Server Spoofing Vulnerability | HIGH | 7.6 | Jul 9, 2024 |
| CVE-2024-35266 | Azure DevOps Server Spoofing Vulnerability | HIGH | 7.6 | Jul 9, 2024 |
| CVE-2024-20667 | Azure DevOps Server Remote Code Execution Vulnerability | HIGH | 7.5 | Feb 13, 2024 |
| CVE-2023-21751 | Azure DevOps Server Spoofing Vulnerability | MEDIUM | 6.5 | Dec 13, 2023 |
| CVE-2023-36561 | Azure DevOps Server Elevation of Privilege Vulnerability | HIGH | 7.3 | Oct 10, 2023 |
| CVE-2023-38155 | Azure DevOps Server Remote Code Execution Vulnerability | HIGH | 8.1 | Sep 12, 2023 |
| CVE-2023-33136 | Azure DevOps Server Remote Code Execution Vulnerability | HIGH | 8.8 | Sep 12, 2023 |
| CVE-2023-36869 | Azure DevOps Server Spoofing Vulnerability | MEDIUM | 6.3 | Aug 8, 2023 |
| CVE-2023-21569 | Azure DevOps Server Spoofing Vulnerability | MEDIUM | 5.5 | Jun 13, 2023 |
| CVE-2023-21565 | Azure DevOps Server Spoofing Vulnerability | HIGH | 7.1 | Jun 13, 2023 |
| CVE-2023-21553 | Azure DevOps Server Remote Code Execution Vulnerability | HIGH | 7.5 | Feb 14, 2023 |
| CVE-2023-21564 | Azure DevOps Server Cross-Site Scripting Vulnerability | HIGH | 7.1 | Feb 14, 2023 |
| CVE-2021-28459 | Azure DevOps Server Spoofing Vulnerability | MEDIUM | 6.1 | Apr 13, 2021 |
| CVE-2021-27067 | Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability | MEDIUM | 6.5 | Apr 13, 2021 |
| CVE-2020-17145 | Azure DevOps Server and Team Foundation Services Spoofing Vulnerability | MEDIUM | 5.4 | Dec 9, 2020 |
| CVE-2020-17135 | Azure DevOps Server Spoofing Vulnerability | MEDIUM | 6.4 | Dec 9, 2020 |
| CVE-2020-1325 | Azure DevOps Server and Team Foundation Services Spoofing Vulnerability | MEDIUM | 5.4 | Nov 11, 2020 |
| CVE-2020-1326 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site… | MEDIUM | 5.4 | Jul 14, 2020 |
| CVE-2020-1327 | A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnera… | MEDIUM | 6.1 | Jun 9, 2020 |
| CVE-2020-0815 | An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps S… | HIGH | 7.5 | Mar 12, 2020 |
| CVE-2020-0758 | An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps S… | HIGH | 7.5 | Mar 12, 2020 |
| CVE-2020-0700 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site… | MEDIUM | 5.4 | Mar 12, 2020 |
| CVE-2019-1306 | A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps… | CRITICAL | 9.8 | Sep 11, 2019 |
| CVE-2019-1305 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross… | MEDIUM | 5.4 | Sep 11, 2019 |
Showing 1 to 25 of 40 CVEs