← All advisories

High severity7.0NVD Advisory· Published Sep 12, 2023· Updated Jun 17, 2026

CVE-2023-38155

CVE-2023-38155

Description

Azure DevOps Server Remote Code Execution Vulnerability

Affected products

11

Microsoft/Azure Devopscpe-rescue5 versions
2019.0.0+ 4 more
- (no CPE)range: 2019.0.0
- (no CPE)range: 2022.0.0
- (no CPE)range: 2020.1.0
- (no CPE)range: 2020.0.0
- (no CPE)range: 1.0.0
Microsoft/Azure Devops Serverllm-create6 versions
(expand)+ 5 more
- (no CPE)
- cpe:2.3:o:microsoft:azure_devops_server:2019.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:azure_devops_server:2019.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:azure_devops_server:2020.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:azure_devops_server:2022.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:azure_devops_server:2022.0.2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38155nvdPatchVendor Advisory

News mentions

0

No linked articles in our index yet.