Medium severity5.4NVD Advisory· Published Jul 15, 2019· Updated Jun 17, 2026
CVE-2019-1076
CVE-2019-1076
Description
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
Affected products
5cpe:2.3:a:microsoft:team_foundation_server:2018:3.2:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:team_foundation_server:2018:3.2:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: Update 3.2
- cpe:2.3:o:microsoft:azure_devops_server:2019.0.1:*:*:*:*:*:*:*
- Range: 2019.0.1
Patches
Vulnerability mechanics
References
1- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1076nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.