Microsoft / Team Foundation Server
23 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2021-27067 | Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability | MEDIUM | 6.5 | Apr 13, 2021 |
| CVE-2020-17145 | Azure DevOps Server and Team Foundation Services Spoofing Vulnerability | MEDIUM | 5.4 | Dec 9, 2020 |
| CVE-2020-0758 | An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps S… | HIGH | 7.5 | Mar 12, 2020 |
| CVE-2020-0700 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site… | MEDIUM | 5.4 | Mar 12, 2020 |
| CVE-2019-1306 | A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps… | CRITICAL | 9.8 | Sep 11, 2019 |
| CVE-2019-1305 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross… | MEDIUM | 5.4 | Sep 11, 2019 |
| CVE-2019-1076 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross… | MEDIUM | 5.4 | Jul 15, 2019 |
| CVE-2019-1072 | A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server a… | CRITICAL | 9.8 | Jul 15, 2019 |
| CVE-2019-0979 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure… | MEDIUM | 5.4 | May 16, 2019 |
| CVE-2019-0971 | An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authe… | MEDIUM | 6.5 | May 16, 2019 |
| CVE-2019-0872 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure… | MEDIUM | 5.4 | May 16, 2019 |
| CVE-2019-0871 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure… | MEDIUM | 6.1 | Apr 9, 2019 |
| CVE-2019-0870 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure… | MEDIUM | 6.1 | Apr 9, 2019 |
| CVE-2019-0868 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure… | MEDIUM | 6.1 | Apr 9, 2019 |
| CVE-2019-0867 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure… | MEDIUM | 6.1 | Apr 9, 2019 |
| CVE-2019-0866 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure… | MEDIUM | 6.1 | Apr 9, 2019 |
| CVE-2019-0777 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross… | MEDIUM | 5.4 | Apr 9, 2019 |
| CVE-2019-0743 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross… | MEDIUM | 5.4 | Mar 6, 2019 |
| CVE-2019-0742 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross… | MEDIUM | 5.4 | Mar 6, 2019 |
| CVE-2019-0647 | An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Inf… | MEDIUM | 6.5 | Jan 17, 2019 |
| CVE-2019-0646 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross… | MEDIUM | 5.4 | Jan 17, 2019 |
| CVE-2018-8529 | A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication between the TFS and Sea… | CRITICAL | 9.8 | Nov 15, 2018 |
| CVE-2018-8602 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross… | MEDIUM | 5.4 | Nov 14, 2018 |
Showing 1 to 23 of 23 CVEs